= === ggS5= UniLab II‘ Universal Development System 


LOW COST SUPPORT OF SOFTWARE AND HARDWARE DEBUGGING 
FOR 150 DIFFERENT 8 AND 16 BIT MICROPROCESSORS 


_ Thank you for your interest in the latest tool for improving microprocessor system 
development productivity. 


The UniLab II is actually four instruments in one: 


1. a real-time, In-Circuit Emulator which uses an actual target microprocessor for 
absolute transparency, 


2. an Advanced 48 Channel Bus-State Analyzer for locating software and hardware 
bugs, 


3. a Stimulus Generator for automated testing, and 
4, an EPROM Programmer for popular devices. 


All in a single package! 
PROGRAM PERFORMANCE ANALYSIS'™ 


Optimize your code's speed with UniLab's Program Performance Analysis option. At 
just $495 you can graphically display just the information you need. 


YOU AND YOUR DESIGNS CAN BE A WINNER WITH UniLab! 


The UniLab's non-intrusive analysis technique lets your hardware and software run at full 
speed, without modification. Its exceptionally powerful triggering language allows you to 
specify precise trigger points based on symptoms you observe, and let the UniLab locate 
the causes for you. The UniLab II also supports all conventional debugging techniques 
including multiple breakpoints and single stepping. 


EASY SUPPORT FOR TOUGH MICROS 


UniLab's portfolio of Personality Paks'™ makes it easy to select exactly the cables, 
adapters, and software you need to work with nearly any target microprocessor. The 
cost of processor specific support: typically under $600. 


You can even get an Orion MicroTarget', a functioning minimum target system, for 
many popular microprocessors. In-Place Emulation Modules plug right into your 
microprocessor's socket for easy hook up. 

Call Orion's Sales Engineers today, toll free, 1-800-245-8500 or 415-361-8883 
(within California) for more information about the exciting UniLab. Better yet, call to 
reserve your own UniLab for A.S.A.P. shipment. 

Best Regards, 


Orion Instruments, Inc. 


04-03-10 (7/87) Printed in the USA 


<3iG UniLab Il'— Universal Development Laboratory 


The UniLab II is the latest generation of state-of-the-art low-cost development systems. With support for virtually 
any 8 or 16 bit microprocessor, the UniLab II offers you ease of use and a range of advanced features not found 
even in more expensive, but less capable alternatives. 


Supporting more than 150 different microprocessor types, the UniLab II gives you the ultimate in versatility 
while providing all the essential tools in a single integrated system. For ease of ordering precisely what you 
need to support a particular microprocessor, Orion now offers Personality Paks configured especially for your 
target processor. See the Personality Pak price list and ordering configuration guide for the chart of micro- 
processors supported. 


The UniLab II requires an IBM PC, XT, AT or compatible PC with PC-DOS 2.1 or later. A minimum of 320K 
RAM (512K with Program Performance Analyzer option) and one floppy disk drive is required, but a second 
disk drive (floppy or Winchester) is recommended. An RS-232C port is required for connection of the UniLab. 


VAX based systems are available. Please contact our Sales Engineers for further information. 


PRICES: 


STANDARD UNILAB II 
(395 ns minimum bus cycle time, 195 ns minimum ROM access time) 


PART NO. PRICE 
84101 UniLab Il (82K emulation memory)... ....0.0.0.0 00.00 eee ee $ 4980.00 
84102 UniLab Il (64K emulation memory). ... 02.0... 0000s $ 5380.00 


84103 UniLab II (128K emulation memory) ...........0... 000 cee ees $ 5580.00 


HIGH-SPEED UNILAB II 
(297 ns minimum bus cycle time, 150 ns minimum ROM access time) 


PART NO. PRICE 
84201 UniLab Il (32K high-speed emulation memory) ...............00 00 eee eee $ 5380.00 
84202 UniLab II (64K high-speed emulation memory) ...................000 0 eee $ 5780.00 


84203 UniLab Il (128K high-speed emulation memory) ................0..000008. $ 5980.00 


System hardware is both memory and speed upgradeable. (Upgrade performed at factory only.) 


ACCESSORIES INCLUDED: 


e User’s Manual with Tutorial Section e Jumper Cable Wiring Tool 
¢ Comprehensive Reference Manual e 16-pin IC Clip 
e Quick Reference Card ¢ Component Clip Adaptor Probes (2) 


e Stimulus Generator Cable 


PROGRAM PERFORMANCE ANALYZER: 
The Program Performance Analyzer (PPA) is a time-saving software tool which generates a graphical time 
or address domain display of your program’s execution. This useful enhancement to the UniLab II system 
gives you the ability to uncover invisible bugs, eliminate unneeded code and increase program efficiency 
at a remarkably low price. 
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WARRANTY: 


All Orion products are covered against defects in workmanship and materials for a period of 90 days from 
date of purchase. Defective items returned to the factory during the warranty period will be repaired or replaced 
at Orion’s option, and returned to the customer. Customer pays freight in, Orion pays freight out. Detailed 
warranty statement available. 


SUPPORT SERVICES OPTION INCLUDING EXTENDED WARRANTY 


During our 90-day warranty, you are entitled to unlimited telephone Applications Engineering support from 
Orion. You can continue to receive unlimited Applications Engineering telephone support and an extended 
product warranty for $500 per year per system, if you purchase this agreement within the normal warranty 
period. The extended warranty begins at 90 days and covers all purchased accessories for an additional twelve 
(12) months (cables are not covered after initial 90-day warranty). Support Services Option subscribers also 
receive free of charge all software updates, and the Orion Express customer newsletter. After the normal 90-day 
warranty period, the extended warranty is available for $700. Consulting services are available at a special 
50% discount rate to Support Services Option subscribers. 


DISCOUNTS: 


Please contact Orion for information on quantity and educational discounts. 


PAYMENT TERMS: 


Open account payment terms are available to rated firms. MasterCard, VISA, and American Express cards 
also accepted. C.0.D. shipments payable only in cash or cashier’s check. Prices and specifications subject 
to change without notice. 


ORIGINAL UNIVERSAL DEVELOPMENT LABORATORY 


The UDL, our original model development system, is still available for CP/M and DOS applications. Prices 
from $2995.00. 


Orion Instruments, Inc. 


702 Marshall Street 
Redwood City, California 94063 
Telex: 530942 
FAX: 415-361-8970 


All Orion products are sold with a no-risk 15-day money-back guarantee. Order Now! 


Call Toll-Free 1-800-245-8500 


In California: 415-361-8883 
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GRIGR UDL’ — Universal Development Laboratory 


Orion’s original Universal Development Laboratory, the UDL, is perfect for the smaller budget. With support 
for virtually any 8 or 16-bit microprocessor, the UDL gives you a basic integrated development system at the 
lowest cost. The UDL lets you get started inexpensively, but is fully upgradeable to the advanced features 
and ease of use of Orion’s new UniLab II. Ask our Sales Engineers for further information. 


For ease of ordering precisely what you need to support a particular microprocessor, Orion now offers Per- 
sonality Paks" configured especially for your target processor. See the Personality Pak Order Configuration 
guide for the chart of microprocessors supported. 


The UDL runs on most CP/M (Version 2.2 or 3.0, 64K RAM required) 5%" and 8” formats and MS-DOS (Version 
2.1 or later, 128K RAM required). A minimum of one floppy disk drive is required, but a second disk drive (floppy 
or Winchester) is recommended. An RS-232C port is required for connection of the UDL to your computer. 


The UDL comes with a User’s Manual, a stimulus generator cable, a jumper cable wiring tool, a 16-pin IC 
clip, and component clip adaptors. 


PRICES: 


STANDARD UDL 
(395 ns minimum cycle time, 195 ns minimum ROM access time) 


PART NO. ee mes PRICE 
82101 Universal Development Laboratory (32K emulation memory) ............... $ 2995.00 
82102 Universal Development Laboratory (64K emulation memory) ............... $ 3390.00 
82103 Universal Development Laboratory (128K emulation memory) .............. $ 3590.00 
HIGH-SPEED UDL 
Saar NG. (297 ns minimum cycle time, ie ns hala eee PRIGE 
82201 Universal Development Laboratory (32K high speed emulation memory)...... $ 3430.00 
82202 Universal Development Laboratory (64K high speed emulation memory)...... $ 3855.00 


82203 Universal Development Laboratory (128K high speed emulation memory)... . . $ 4085.00 


WARRANTY: : 
All Orion products are covered against defects in workmanship and materials for a period of 90 days from date 
of purchase. Defective items returned to the factory during the warranty period will be repaired or replaced at 
Orion’s option, and returned to the customer. Customer pays freight in, Orion pays freight back. Detailed warranty 


statement available. 

PAYMENT TERMS: | 
Net open account terms available to rated firms. MasterCard, VISA, and American Express cards also 
accepted. C.0.D. shipments payable only in cash or cashier’s check. Prices and specifications subject to 
change without notice. 


Orion Instruments, Inc. 


702 Marshall Street 
Redwood City, California 94063 
Telex: 530942 
FAX: 415-361-8970 


All Orion products are sold with a no-risk 15-day money-back guarantee. Order Now! 
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Call Toll-Free 1-800-245-8500 


#03-02-10 In California: 415-361-8883 Printed in U.S.A. 
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- 702 Marshall St., 6th Floor 

“Redwood City, CA 94063 
Tel. (415) 361-8883 

Telex 530942 


TELEPHONE REFERENCE GUIDE 


SALES DEPARTMENT 


VP SALES 


SALES ENGINEERS 


SALES. COORDINATORS 


TECHNICAL SUPPORT 


TECH SUPPORT SUPV. 


TECHNICAL LIASION 


TECH SUPPORT ENGINEERS 


CUSTOMER SERVICE 


CUSTOMER SERVICE REPS K 


Marcia Smith (Eastern/Western) 


Telephone: 415-361-8883 
800-245-8500 


Fax: 415-361-8970 
Telex: 530942 
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Bill White 


John Bugee' (Eastern Region) 
Bill Leach (Central Region) 
Jan Liband (Western Region) 


Karen Cash 
Claudia Holt 


Bob Bowes 
Scott Gilliland 


Chuck Gorman 
Marina Zago 


aty Morkner (Central/Intl) 


ext. 
ext. 
ext. 
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ext. 


ext. 
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238 
241 
240 


228 
235 


227 


247 


231 
215 


221 
224 
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WESTERN REGION 


SO. CALIFORNIA 

Advanced Product Sales — APS 
32184 Oak Shore Drive 
Westlake Village, CA 91361 


Telephone: 818/706-8351 


APS 
847 Triunfo Canyon Rd. 
Westlake Village, CA 91361 


Telephone: 805/496-7355 
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APS 
13130 Decant Drive 
Poway, CA 92064 


Telephone: 619/530-0200 


ROCKY MOUNTAIN 


Scientific Devices Inc. — SDI 
1006 Depot Hill Road 
Broomfield, CO 80020 


Telephone; 303/469-5145 
Fax: 303/465-2980 
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SDI 
3920 E. Indian School Rd. 
Phoenix, AZ 85018 


Telephone: 602/957-0401 
Fax: 602/956-9359 


Lucky Balin 


Mort Katz 


Mike Knapp 


Brian Clark 
(also temporarily covering Utah) 
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Jeff Gipe 


SDI Jim Vermillion 
5215 Los Arboles NE 
Albuquerque, NM 87110 


Telephone: 505/883-3668 
Fax: 303/465-2980 — (CO office) 
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SDI** Dave Orahood 
16882 Balsa Chica Street 

Huntington Beach, CA 92649 

Telephone: 714/840-3501 


** Billing address only. 


NORTHWEST ., 

Syntek — SYN | Craig Howland 
11410 N.E. 124th Street Wayne Van Zandt 
Kirkland, WA 98034 

Telephone: 206/488-0394 

Fax: 206/821-7726 

NO. CALIFORNIA 

Western Digital, Inc. — WDI Jim Williams 
655 Sky Way, Suite 123 Brad Rulien 

Smn Carlos, CA 94070 Terri Tellez 


Telephone: 415/591-6535 


CENTRAL REGION 
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SOUTHWEST 


scientific Devices Southwest — SSW *Harvey Evans 
1200 East Collins Blvd. Dan Evans 
Suite 110 Carl Geller 


Richardson, TX 75081 (Dallas & Ft. Worth) Charles Farris 
Jerry Bissell 


Telephone; 214/231-8106 Teri Campion 
*OK,AR,LA 

SSW Rick Morgenstern 
16720 Stuebner Airline Road 

Suite 222 

Spring, TX 77379 | (Houston) 

Telephone: 713/376-8666 | ™, 

SSW : Terry Bissell 
605 Broken Bow 

Roundrock, TX 78681 (Austin & San Antonio) 


Telephone: 512/388-3982 -— Austin 
512/736-3164 —- San Antonio 
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WATER WORLD 


sector Engineering Sales Inc. — SES Ron Zimm 
8705 Port Washington Road Cathy Zimm 


Milwaukee, WI 53271 


Telephone: 414/352-8280 


_—e cee eee eee 


SES Mike Baum 
8441 Wayzata Blvd 
Suite 104 


Bloomington, MN 55426 


Telephone: 612/593-1809 
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Sellenraad & Associates 
770 South Adams 


‘ Suite 111 


Birmingham, MI 48011 


Telephone: 313/645-2640 
Fax: 313/540-4393 


Wil Sellenraad 
Terry Wing 
Brian Clapp 


RASTERN REGION 


NEW YORK 

Dick Brown Associates — DBA 
1728 Rue Mirador 

Point Pleasant, NJ 08742 


Telephone: 201/295-1357 


Dick Brown 


KEYSTONE STATES 


John Bell Associates — JBA 
The Limekiln 

Rt. 202 — #3 

Holicong, PA 18928 


Telephone: 215/794-7075 
Fax: 215/794-0744 


CHESAPEAKE 
scientific Associates, Inc. — SAI 


9512A Lee Highway 
Fairfax, VA 22031 


Telephone: 703/385-0600 
Fax: 703/359-7341 


SOUTHEAST 


Teqspec — TCS 
3211A Alt. US 19 N 


Palm Harbor, FL 34273-0399 


Telephone; 813/785-2276 


TCS 

1325 N. Atlantic Ave. #192 
Cocoa Beach, FL 32931 
Telephone; 305/783-3444 


John Bell 
Ken Wilson 


Donald George 
Richard Keyes 
Mark Holtzer 
David Day 
Donald Williams 
Dennis McFadden 


Dick Zahn 
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Dennis Harrington 


TCS 
PO Box 11060 
Ocala, FL 32673 


Telephone: 904/347-1707 
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TCS 
PO Box 2786 
Norcross, GA 30071-2786 


Telephone: 404/242-7215 
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TCS 

1019 A Old Monrovia RD 
Suite 132 7 
Huntsville, AL 35806 


Telephone: +205/883-6699 
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TCS 
3919 Quiling Road 
Winston Salem, NC 27104 


Telephone: 919/765-5553 


Berni Preuss 


Harold Donehoo 
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Cuz Lankford 


Bob Dinning 
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NORTHEAST 


Tri-Logic — TLI 
187 Ballardvale Street 


Ballardvale Park 
Willington, MA 01887 


Telephone: 617/658-3800 


Brad Paul 

Rich Paul 

Dave Paul 

Rich Salmon 
Dave Starrett 
Kamie Rienhart 
Joe Socha 
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7.28.87 REPLIST 


UDL Specifications 


Host Computer Interface 


RS-232C connector, 19,200 or 9,600 baud, 
switch selectable. 


Diskette Formats 


CP/M 8” IBM format, many 5%” formats 
IBM PC 5%", MS-DOS 

ISIS 

Apple CP/M, 80 col 


Emulator 


Download tirne: 1 second for 2K bytes including 
16-bit block error check. (2 sec on some 
systems) 

195 ns max access time ROM emulation. 

(145 ns optional.) 

32K x 8-bit or 16K x 16-bit standard. By cable, 
program option. 

Expandable to 128K bytes with optional plug-in 
board. 

20-bit enable address decoding. 

Individual 2k segments can be selected in any 
combination within 17-bit field. 

Stand-alone operation possible as a ROM 
emulator. 

16-bit Idle register loops target CPU allowing 
loading of emulation RAM and resumption of 
program execution. 

Optional, target-processor-specific, software 
gives full debug capability including register 
and target memory display and change, 
breakpoints, and single stepping. 

Program loading software: from hex or binary 
disk files, hex serial download, memory 
image, ROM read. 


Bus-State Analyzer 


48 data inputs. Two groups of 8 can be 
separately clocked. 

6 clock signal inputs. Gated to form one bus 
clock: 
Clock edge filter prevents re-trigger before 
100 ns. 
395 ns minimum bus cycle (10 MHz 68000) 
297 ns with optional high-speed option. 

Address demultiplexing latches included— 
also used by emulator 

170 cycle x 48 bit Trace memory 


EPROM/EEPROM Programmer 


Smart programming algorithm for high speed. 

28-pin Textool zero insertion force socket 
handles 24 and 28 pin devices. 

Programs single supply EPROMs and EEPROMS. 

One personality module handles 2716, TMS2516, 
2532, 48016. 

Personality modules for 2732A, 2764/128, 
2764A/128A/256 also included. 

Optional module available for 27512. 


Signal Inputs 

TTL logic levels. (74ALS inputs) 

-1 ma maximum loading includes emulator & 
analyzer. 


Analyzer Trigger 

4-step sequential trigger 

RAM truth tables allow search for any function 
of 8-bits at each 8-bit group, for each step. 

8 truth tables per step x 4 steps = 32 256- 
bit tables 

16-bit inside/outside range detection on 
address lines 

4-bit segment enable gives 20-bit address 
capability. 

Pass Counter: wait up to 65,382 events or 
cycles before 4th step. 

Before/After/At Pass count trigger enable. 

Delay Counter: wait up to 65,382 events or 
cycles to stop trace. 

Filter feature. Records only cycles which 
satisfy trigger criterion plus 0-3 cycles after 
each qualified cycle. 

Oscilloscope sync output. (Sync on trigger.) 

Interrupt output: Interrupt target on trigger 
(if enabled) 

LED indicates searching for trigger. Stand-alone 
operation possible while waiting for trigger. 


Software Features 


Command driven with single context for 
all 4 instruments. 

Extensive macro capability 

On-line Help screens. 

Menu driven shell generates command 
lines. 

User definable function keys. 
Calculator, ASCII table, IC pinout library, 
memo pad, terminal emulation, and 

DOS access. 


Signal Outputs 

TTL logic levels (74LS244 outputs) 

100 ohms forward terminating resistors on 
Emulator data lines. 

Reset output: open collector, 7406 thru 47 
ohms. 

Interrupt output: open collector, 7406, low true 

9 Stimulus outputs (at EPROM socket) (8255 
NMOS outputs). 


Physical 

Size: 2.1” hi x 13” wide x 7.8” deep. 
Weight: 4 Ibs. (11 Ibs. shipping weight) 
Fits easily in a slim-line brief case. 


Power 

100 KHz switching supply 
110v + 10% 50/60 Hz 15 Watts (standard) 
220v + 10% 50/60 Hz 15 Watts (optional) 


Accessories Included 


UDL User’s Manual 

Personality Module for 2716, 2758, 2516, 2532 
EPROMs and 48016 EEPROMs, 2732A 
module, 2764/128 module, 27256/2764A/ 
27128A personality module. 

1-ROM Emulator cable 8-bit, 24-pin version 
unless otherwise specified. 

1-Analyzer cable pre-configured for your target 
processor 

1-Jumper wiring tool (8M) 

1-40-pin IC clip 

1-16-pin IC clip 

1-RS-232 cabie, 10-ft. retractile (coiled cord) 

1-Input stimulus cable 

2-Component clip adaptor probes 

1-System Control Program Diskette 


Disassembler/Debugger Software 
Includes symbolic single-step, target memory 
and register display and change, program 
start/stop/branch, input/output. Available 

for the following processors: 


1802/4/5/6, 6301/3, 6500/02/C02, 6800/2/8, 
6801/3, 6805, 6809E, 68000, 68008, 
8048/35/39/40/49/50, 8051/31/32/52, 
8085/80, 8086/186/286, 8088/188, 

Z-8, Z-80 and NSC-800. 
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<XUFG 7 PRICE LIST 06/01/87 08:57 
.INE?S, EMULATION MODULES, MICROTARGETS, AND PERSONALITY FAKS 
LF TION : FART ID REV-RTN # LIST FRICE 
“wHE48 UDL, GROUP 48 | 770014 4203-907 295.000 
.DB48 UNILAB, GROUF 48 77504 A20E-907 295.000 
)DBS1 UDL, GROUF St 77002 4203-907 B95. 000 
)DES1  UNILAB, GROUF Si 77502 4202-907 295.000 
)DES1F UDL, GROUF 51 77003 4203-907 295.000 
.DBS1F UNILAB, GROUF F | 77503 AZOZ-907 295.000 
)DBS11 UDL, GROUF 4! 77004 © 4203-907 295.000 
.DB611 UNILAE, GROUF 61 77504 4203-907 295.000 
2DB6S UDL, GROUF 4% 77005 4203-907 295.000 
2DB6S  UNILAE, GROUF 63 77505 4203-907 295.000 
)DB65 UDL, GROUF 65 77006 4203-907 295.000 
2DB65  UNILAE, GROUF 65 77506 AZOZ-FO7 295.000 
)DR6SF UDL, GROUF 11 77007 4203-907 295.000 
.DB6SF UNILAB, GROUF 11 77507 42028-9007 295. 000 
-)DB68 UDL, GROUF 6a 77008 4203-907 295.000 
.DE68 UNILAB, GROUF 68 77508 A2OZ-FO7 295.000 
.DE6B81 UDL, GROUP o1 77009 4203-907 295.000 
2DB681 UNILAB, GROUF O14 77509  ABOS-907 295.000 
2DB682 UDL, GROUF OF | 77010 4203-907 295.000 
ODB682 UNILAE, GROUF o2 | TTS 4208-907 295.000 
IDB68S UDL, GROUF O% 770911 4202-907 39S. O00 
ODE685 UNILAR, GROUF 05 77511 4203-907 295.000 
ODB688 UDL, GROUF 08 77012 4203-907 295.000 


OP"488 UNILAB, GROUF 08 77512 APOR-F9O7 295.000 
0. 9 UDL, GROUF a9 77013 AZOZ-907 395.000 
YDR689 UNILAB, GROUF 09 F75AS A2OS-9O7 295.000 
_ 868K UDL, GROUF 68K 77014 4202-907 495.000 
“WESSK UNILAB, GROUF 6ek | 77514 A2OS-907 AGS.000 


ODB@S  UDL,-GROUF 85 VIOUS 4203-907 PF. OOO 
DDESS UNILAB, GROUF 85 77315 AZOS-9O7 29S. OOO 
DDE8S UDL, GROUF 84 —  T77OLG . - 4202-907 495.000 
DDBBS . UNILAB, GROUF 84 77ILG AZOA-FO7 495.000 
DDB6BB * UDL, GROUF 88 77O17 4203-907 S93. O00 
DDR88 UNILAH, GROUF 88 LEDS A2ZOS-FO7 29S. O00 
DDE9G UDL, GROUF 96 77918 ASO3-9O7 495.000 
DDEOS6 UNILAB, GROUF 96 77OAB 4203-907 AGS.000- 
DDESS UDL, GROUF $8 LI OLD. * 4203-907 29S. OOO 
DDES8& UNILAB, GROUF S8 . Vfak? 4203-GO7 EGS. OOD 
DDEZ8 UDL, GROUF 08 7T7ORO 4203-997 295.000 
DDEZ8 UNILAB, GROUF ©O8 F7GEO 4203-907 295.000 
DDEZB80O UDL, GROUF 80 77IRA 4203-907 — S99. O00 
DDBZBO UNILAB, GROUF 80 figel —  ABOS-GO7T © S95. OOO 
DDEZ8EK UDL, GROUF Z8kE PT 2 4203-907 495.000 
DDEZBK UNILAEB, GROUF Z8k ff see 4202-907 495.000 
DSM18 UDL, GROUF 18 77ORS 4203-907 ZOO. OOO 
DSM18 UNILAR, GROUF 18 figs 4203-907 200.000 
EM6303R EMULATION MODULE, 6203R 7B014 | ALOI2-FO6 eee OOO 
EM623F01 EMULATION MODULE 7BOOS 4202-906 279.000 
EM64180 EMULATION MODULE 64180 AB012 4202-906 Soe OO 
Er. “2 EMULATION MODULE 6502. FBOLO 4202-906 175.000 
EM SES EMULATION MODULE 6805E2 7BOLS 4202-906 225.000 
EM680SF EMULATION MODULE 78007 4A2ZO2-F906 279.000 


“M6809 EMULATIGN MODULE 46809 780014 4202-906 175.000 
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iM. L=EMULATION 
‘ SaySB- EMULATION 
e302; EMULATION 
'MBO48F EMULATION 


-MBO8S EMULATION 


MODULE 
MODULE 
MODULE 
MODULE 
MODULE 


FRICE LIST 
AND PERSONALITY FAKS 


MICROTARGETS, 


68000 
BOS1LF 
BOs 1 
BO48F 
BO8S 


>MBOBS6MAX EMULATION MODULE 
=MBOBSMIN EMULATION MODULE 
>=MBOBBMAX EMULATION MODULE 8O8SMAX 
-MBO88MIN EMULATION MODULE 8oe8eaMINn 


2MZ8 EMULATION MQDULE 
2MZ80 EMULATION MODULE Zao 
IT62F01 MICROTARGET 

1T64180 MICROTARGET 

1T6502 MICROTARGET 

1T68K MICROTARGET 


IT6B8FOS MICROTARGET 


ITBOS1 


MICROTARGET 


ITBOSIF MICROTARGET 


1TBOB8S 


MICROTARGET 


ATBOBSMAX MICROTARGET 
ITBOBSMIN MICROTARGET 
ITBOSBMAX MICROTARGET 
I1TB8OBBMNIN MICROTARGETBOARD 


1TZ8 
1TZ80 
“FO "1B UDL 


“hk. 8 UNILAR 
‘FAR G3 UDL 
AE63 UNILAB 


wera GEOZR UDL 
*FAKGZO3R UNILAR 
“PAK GZOS -UDL 
“FAK GSZOS UNILAR 


“PAKS ZOSF UDL 
*PAKOZOSE UNILAE 
PFAKOSFOL UDL 
“PAK GSPOL UNILAE 
“PAK GIPOS UDL 
“PAK63FO05 UNILAB 
SPAK6S UDL 
*FAK6S UNILAER 
"PAK6S/11 UDL 
“PAKGS/11 UNILAE 
PPAR 6502 UDL 
PPAKSGSO2 UNILARB 
FPRAK6S10 UDL 
PPAK6S510 UNILAB 


FFAK6S11Q UDL 
FFAK 65110 UNILAR 


PFAK6512 


UNILAE 


PPAR 65410 UDL 
PF: "55410 UNILAB 
a oF UDL 


>»PAK GHIZO 


Unilab 


MICRKOTARGET 
MICROTARGET 


! 


78018 
7BQO0S8 
78008 
7B006 
7BQ09 
7BO1L6 
7BOOR 
7BO17 
7BQL1 
78018 
78004 
78507 
7eS1= 
78506 
7BS10 
—JEEOD 
7BSOS 
7ES02 
7B506 
78504 
78503 
78512 
7BS11 
78315 
78514 
7T9Q2R3 
Fas aoe 
77O27 
79527 
79028 
793529 
FIOEO 
79SSO 
79029 
PIG? 
7TIOOE 
7TISOS 
7TFOSA 
Fr ee | 
TIONG 
7950S 
79PORS 
TISSS 
TIORS 
TPS RS 
7TIOZ4 
7OPSS4 
7FIOO7 
APIO 
Wr dal Fe 
7TIOSRS 
79326 
79OR2 


w aateay > 


a ee eee 


REV-RTN 4 


4202-906 
AZO2Z-FO6 
4202-905 
4202-S06 
4202-906 
4202-906 
4202-906 
AZOL—-GOS 
4202-906 
4202-906 
4202-906 
A2OI2Z-GFO6 
4202-906 
4202-906 
4202-906 
42OZ—9OG 
4202-906 
4AZO2Z—-GOS 
4202-906 
AZOL—-FOS 
4202-906 
42OR-FOS 
42023-9085 
AZO2-GO6 
4202-906 
4201-909 
4201-909 
4A2ZO1-9O9 
4201-909 
4201-909 
4201-909 
4201-909 
4AZO1L-909 
4201-909 
4201-909 
4201-909 
AZO1L1-909 
4201-909 
4201-909 
4201-909 
4201-909 
AZOL-90O9 
4201-909 
AZO1L-9FO9 
4201-909 
4201-909 
4201-909 
4201-909 
4201-909 
4201-909 
4201-909 
4201-909 
4201-909 
4201 -40f 


ee eee 
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feo. OO 
275.000 
175.000 
275.000 
175.000 
eee OON 


eos OOO 


175.000 

175.000 
175.000 
175.000 


200, O00 


150.000 


175.000 
S00, O00 


FSO, OOO 
Bo, OOO 


we Net St Ne 
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ee Ne nt Sel Fa! 
a Na Set TOE SL 
ee fat Nf Ne! 
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16/02/87 12:59 


CXUFQ 


ORION INSTRUMENTS 


PRICE) LTSt 


)DE*S, EMULATION MODULES, MICROTARGETS, AND FERSONALITY FAKS 


- IP TION 


*FAK468 ° UNILARB 
"FAK68008 UDL 
“FAK 68008 UNILAB 
*"PAK68010 UDL 
"FAK 68010 UNILAB 
"FAK6805E2 UDL 
“FAK S6B05E2 UNILAEB 
"FAK 6SB0OS5F UDL 
"FORK 681 UDL 

“FAK 681 UNILARB 
“FAK 6811 UDL 
“PFAK68B11 UNILAER 
“PAKG6B2 UDL 

"FAK 682 UNILAB 
"FAK685 UDL 
"“FAK685 UNILAR 
“PAK 689 UDL 
“FAK689 UNILAB 
“FAK 6BEK UDL 

"PAK 68K UNILAB 
“FAKG6GBFOL UDL 
*PAK6EFO1 UNILARB 
“F: ““BFOS UNILAB 
“BL 00 UDL 

“AK BOO UNILAB 


“FAKBOLBG UNILAEB 
"FAKB0O188 UDL 
“FAK BO2B6 UDL 
"FAKBO2Z86 UNILAR 
“PAK BOZB6& UNILAER 
"FAKBO31 UNILAB 
“FAK 8048 UDL 
“FAK8048 UNILAB 
“FAK BO4BF UDL 
“PAKBO46BF UNILAB 
"PAK BOSL UDL 
“FAKRSOSLIF UDL 
“FAK BOSIF UNILAR 
“FAK BOBO UDL 
“FAKBOBO UNILAB 
*FAKBOBS UDL 
“PAK BOBS UNILAB 
“FAKBOBSMAX UDL 


“FPAKBOBSGMAX UNILAB 


“PAKBOBSMIN UDL 


“FAKBOB6MIN UNILAR 


*FAKBOBSBMAX UDL 


“Fo “20B88MAX UNILAB 


i] oe QO8BMIN UDL 


FPFAKBOBBMIN UNILAR 


~"AKRBO97 UDL 


“wae 


pA g Taw, ; 
Tne fg 2 hooks 
Oe : ‘ 


eee 


FART ID 


79008 
79508 
79OL2 
79512 
79028 
79528 
79014 
79514 
79O4C 
79009 
79509 
79004 
79504 
79O1O 
79510 
79039 
79539 
7IOLS 
79515 
79014 
79514 
79037 
79537 
79540 
79051 
79551 
79042 
79542 
79043 
79044 
79543 
79544 
79502 
79001 
795014 
79049 
79549 
79002 
TIOOS 
79SOZ 
79O1S 
79515 
79045 
79545 
79025 
79525 
79014 
79516 
79026 
79526 
79017 
79SA7. 
79046 


4201-909 
4301-909 
4201-909 
4201-909 
4201-909 
ABO1-90O9 
4201-909 
4201-909 

201-909 
4201-909 


4291-909" 


4201-909 
4201-909 
4201-909 
4201-909 
4201-909 


4201-909 


4201-909 
4201-909 
4201-909 
4201-909 
4201-909 
4201-909 
4201-909 
4201-909 
4201-909 
4201-909 
4201-909 
4201-909 
4201-909 


- 4201-909 


4201-909 
ASO1-909 
4201-909 
4201-909 
4201-909 
4201-909 
4201-909 
4201-909 
4201-909 
4201-909 
4201-909 
4201-909 
4201-909 
4201-909 
4201-909 
4201-909 
4201-909 
4201-909 
4201-909 
4201-909 
4201-909 
4201-90 


FAGE 


. 
4 


7 ni. 


06/01/87 08:57 


beats 


REV-RTN # LIST PRICE.” 
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-XUFQ 


ORION INSTRUMENTS 


PRICE List 


IDB? S, EMULATION MODULES, MICROTARGETS, AND FERSONALITY FARES 


FAKS6 UDL 
‘FAEI6 UNILAB 
“PFARPLAIN UDL 
“FARFPLAIN UNILARB 
"FARSB UDL 
"FAKSS UNILAR 
“"PFAKSBF UDL 
"FAKSBF UNILARB 
“FARZ8 UDL 
"FAKZ8 UNILAR 
*PAKZBO UDL 

“FAK ZBO UNILAR 
“PAK ZB00O1 UDL 
"PAK ZBOOL UNILAR 
“PAE ZBOO2 UDL 
“PAK ZB0O02 UNILAR 
“FAR ZBF UDL 

“FAK ZEF UNILAB 
*PAKZBF64 UDL 
“PAKZBF64 UNILAB 


180 RECORDS FRINTED 


‘ 


FART ID 


79050 
79550 
79048 
79548 
79021 
7952 1 
7IOBS 
79522 
79041 
79541 
7TIOBO 
79520 
79047 
79547 


REV-RTN 4 


4201-909 
ASOL-FO9 
4201-909 
AZOL-GO9 
4201-909 
4201-909 
4201-909 
4201-909 
4201-909 
4201-9a9 
4201-909 
4201-909 
4201-909 
4A20O1-FO9 
4201-909 
4201-909 


— 4201-909 


AZOL-909 
4201-909 
A2O1-9O9 
4201-909 


FAGE 


04/01/87 08:57 


LIST FRICE 
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PRICE LISt 


FART ID 


REV-RTN 4 


FAGE 


Lio) PRICE 


1 


O6/01/87 09:07 


— a a me ae ee me mee mae ey en sues meet meat ay momen wocee mem cua caus nan mens sim mts wanes more sham ses cents seus wives cue stem ouuhe ete vent see coare cues tome cutest Senet Sey tent South hatte Gm ene Sinem monet ste Seen Seven ty Senet wove me eine ras meth meee Seen sects mes ene os notes neues ener, sen wang mms omy eon pms pubs pins eee eee 


UDLi28 
UDL12e 
UDL128 
UDL128 
UDL128 
UDL128HS- UDL 
UDL.128HS UDL 
UDL128HS UDL 
UDLiZBHS UDL 
UDL128HS UDL 
UDL32 
UDL32 
UDL32 
UDL32 
UDL32 
UDL32HS 


UDL2HS UDL & 
UDL32HS UDL 3 
UDL32HS UDL & 
UDL32HS UDL 2 


UDL64 
UDL64 
Le 4 
Unwu4 UDL. 
— DL64 — UDL 
OL 64HS UDL 
UDL64HS UDL 
UDL64HS UDL 
UDL464HS UDL 
UDL64HS UDL 


UDL 
UDL 
UDL 


UDL & 
UDL 3 
UDL = 
UDL 3 
UDL 3 


7 oe 1D SPEED 

% oD. SPEED, 
© STD SFEED, 
. STD SFEED, 
* STD SFEED, 


< HIGH. SPEED, 


126K HIGH SFEED, 


OAK. 
64k. 
4k 
64k: 


; ALGH SPEED, 
* HIGH SFEED, 
« STD SFEED 


' STD SPEED 

: STD SFEED, 
< STD SPEED, 
< STD SPEED, 
< STD SPEED, 
UDL 32h STD SFEED 
< HIGH SFEED, 
¢ HIGH SPEED, 
< HIGH SPEED, GERMAN 
“ STD SFEED, 
: STD SFEED 
< STD SFEED, 
< STD SFEED, 
< STD SFEED, 
: STD SPEED, 
< HIGH SFEED 


HIGH SFEED, 
HIGH SFEED, 
HIGH SFEED, 
HIGH SFEED, 


20 RECORDS FRINTED 


AUSTRALIAN 
BRITISH 
GERMAN 
THOR 
AUSTRALIAN 


BRITISH 
GERMAN | 
THORN 


AUSTRALIAN 
BRITISH - 
GERMAN 
THORN 


AUSTRALIAN 
BRITISH 


THORN 


AUSTRALIAN 
ERITISH 
GERMAN. 
THORN 


AUSTRALIAN 
BRITISH 
GERMAN 
THORN 


BS10%3 


S2133 


82207 
B2101 
B21%1 
B2111 
82121 
82141 
B2201 
S221 
82211 
B2221 
B2241 
B2102 
B2122 
82112 
82122 
82142 


tan Van Vie tan) 
B2202 


Wet aes et 


4101-902 
4101-902 
4101-902 
4101-902 
4A1O1-SO2 
4101-902 
4101-902 
4101-902 
4Aio1-902 
4101-902 
4101-902 
4101-902 
ALO1L-9SO2 
4101-902 
4101-902 
4101-902 
4101-902 
4101-902 
4101-902 
4191-902 
4101-902 
4101-902 
4101-902 
4101-902 
4101-902 
4101-902 
4101-902 
4101-9oO2 
4101-902 
4101-902 


4085 .000 
42 25.000 
4085 .Q000 
4085, 000 
4085.000 
2995.000 
299S5.000 
=145.000 
PFS. OOO 
299S.000 
2420, 000 


2430, O00 
580,000 
2430, 000 
B4S0, O00 
SEO, OOO 


$390,000 
2540.,000 
S590, 000. 
290.000 | 
3855.000 
B55. 000. 
4005.000- 
2855.000- 
SBSS.000. 


UDL 


32\GARY?TYFE FRCLSTSS. RET 
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UNTI128 UNILAB II 128k STD SFEED, BRITISH 84113 4A102-GO3 ot 7 od, OOO 


UNTi268 UNILABIT 128k STD SFEED, AUSTRAL 84135 4102-903 9580, 000 
UNT128 UNILABII 126K STD SFEED, DOMESTI 84103 4102-903 WB. OOO 


UNT128 UNILABIT 128k STD SFEED, GERMAN 84123 4A1O2-903 HBO.000 - 
UNT128 UNILABII 128 STD SFEED, THORN £84143 4102-903 HBO, OOO 


UNTiS8HS UNILAB IT 1286 HIGH SFEED,BRIT 84213 4102-903 6120,000 
UNIiS28HS UNILABII 126K HIGH SFEED AUSTRL 84223 4102-903 =29B0.,000 


UNI1L28HS UNILABIT 128K HIGH SFEED, THORN 84242 © A102 -903 T9780. 000 
UNTI28HS UNILARII 128k HIGH SFEED,DOMEST 84203 ALO2-SO3 ~9BO, OOO 


UNTI28HS UNILABIT 128E HIGH SFEED,GERMAN 84225 4102-903 27830, 000 


UNIS2 UNILAB Il 32k STD SFEED, BRITISH 84111 ALO2-9OR — S120 O00 
UNTIS2 UNILAR [1 32k STD SFEED, DONEST 84101 4102-903 4980O.,000 


UNIS32 UNILABII 32k STD SFEED, AUSTRAIL 84131 4102-903 4980.000 


UNIA2 UNILABII 32k STD SFEED, GERMAN 84121 4102-903 4980.000 


UNI32 UNILABII 22k STD SFEED, THORN 84141 ALOS-9OR 4980, 000 
UNTS2HS UNILARII 22k HIGH SFEED, AUSTRL 84221 4102-903 2B, OOO 
UNT32HS UNILARBII 32E HIGH SFEED, DOMEST 84201 4102-903 S280. 000 
UNTS2HS UNILAB Il 32K HIGH SFEED, BRITISH 84211 41028-903 a2, OOO 
UNTS32HS UNILABII @2E HIGH SFEED, GERMAN 84221 A1O02-902 S200. 000 
UNT32HS UNILABII 32k HIGH SFEED, THORN B4241 4102-903 3280, OOO 
UNT 4&4 UNILAR II 64k STD SFEED, BRITISH &4112 ALOS-9OR So20. OOO 
U4 UNILABII 64K STD SFEED, AUSTRAIL 84132 . 4102-902 9280, 000 
Ui 14 UNILABIIT 646 STD SFEED, DOMESTIC 84102 4102-903 Se BO. OOO - 

NI64 UNILABIIL 446 STD SFEED, GERMAN B4122 4A1LO2-903 3280. 000 


“weep 164 UNILABIT 64 STD SFEED, THORN 4142 4102-902 2280. OOO 
UNT64HS UNILAB [I 64K HIGH SFEED, BRITISH 684212 4102-903 9720, O00 
UNI64HS UNILABRII 464K HIGH SFEED, AUSTRAL 84232 4102-902 780.000 


UNI64HS UNILABII 64h HIGH SFEED, DOMESTI 84202 4102-903 2780, O00 


UNI64HS UNILABIT 64F HIGH SFEED, GERMAN 84222 —  ALOR-9OR 7780. 000 
UNI64HS UNILABIT 646 HIGH SFEED, THORN B4242 4ALO2-9O3 2780,000 
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Sk UtIETION 


ORION INSTRUMENTS 


PRICE LIS 


PAGE as | 


Q6/O01/87 O9:02 


FART ID REV-RTNW # LIST FRICE 

116 FERSONALITY MODULE 2714 73002 4202-906 30.000 
PMa2 FERSONALITY MODULE 3723A 7 S004 4202-906 50.000 
PMZ212 FERSONALITY MODULE 2732B, i2V —7EOL4 AZO2-FGOS 50.000 
PMS12 FERSONALITY MODULE 27512 7SO1L6 4202-906 50. O00 
FMS621A FERS. MOD.,27256, S1V, REV A —7SALO 4202-906 90,000 
FMS621B FERS. MOD. 27256, 21V, REV & 7BOLO 4202-906 J. O00 
FIMS4A FERSONALITY MODULE 37256, REV A 73EAO06 4202-906 50.000 
FMS6B FERSONALITY MODULE 27256, REV B 72006 4202-906 39.000 
FM64A FERSONALITY MODULE 2764, REV A 72AQN8 4202-906 SO.000 
FMS4E FERSONALITY MODULE 2764, REV B 72008 4202-906 20.000 

10 RECORDS FRINTED 
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XXUFQ FRICE LIST 05/01/87 08:53 
CABLES, UFGRADES 
P_“RIPTION FART ID REV-RTN ## LIST FRICE 
ft 1624 CABLE,EM, 1SBIT/24F IN 74905 4202-906 95.000 | 
C1628 CABLE, EMULAT, L6BIT/S8FIN 74906 4202-908 935.000 © 
CiéD CABLE, EMULAT, 146BIT/DIRECT 74907 4202-906 3. O00 
C824 CABLE, ROM, SBIT/24FIN 74900 4202-906 3. O00 
C828 CABLE, EMULAT, SBIT/28FIN FAIOL 4202-906 79.000 
CSD CABLE, EMULAT, SBIT/DIRECT 74902 4202-906 5.000 - 
CA CABLE, ANALY, GROUF A 74A7OS 4202-906 85.000 
CE CABLE, ANALY, GROUF B 74704 4202-906 85.000 
Cc CABLE, ANALY, GROUF C TATOOS 4202-906 BS.000 
CD CABLE, ANALY, GROUF D 74706 4202-906 53.000 
CE CABLE, ANALY, GROUF E 74707 4202-906 85.000 
CF CABLE, ANALY, GROUF F 74708 4202-906 835.000 
CG CABLE, ANALY, GROUF G 74709 4202-906 3.000 
CH CARLE, ANALY, GROUF H 74710 4202-906 3.000 
CI. CABLE, ANALY, GROUF I 74711 4202-906 B5.000 
CK CABLE, ANALY, GROUF E 7TATAR 4202-906 85.000 
CL CABLE, ANALY, GROUF' L. T4715 © 4A2O2-FO6 85.000 
cM CABLE, ANALY, GROUF M 74714 4202-906 150,000 
CN CABLE, ANALY, GROUF WN. 74715 4202-906 65.000 
CP CAERLE, ANALY, GROUF F 74716. AZOR-9AG6 ae OOO 
CQ CABLE, ANALY, GROUF OQ 74717 A2O2-F9OG BS.000 
CR CABLE, ANALY, GROUF R 74718 4202-906 3.000 
CS CABLE, ANALY, GROUF S 7A719 4202-906 BS.000 | 
GF CABLE, ANALY, GROUF T 74720 4202-906 3.000 
Fo 64180 UNILAER : ~ 74552 AZOL-GO9 700.000 | 
NIUE UDL UFGRADE TO UNILAER | TASES 4203-907 1985. 000 © 
FGRADE 128K STD TO 128h HIGH SFEED 74218 A202-F9OG 600,000 | 
FGRADE 32 STD TO 128 HIGH SFEED 743514 ABOZ-F9OEG 1200.,000 | 
UPGRADE 22 STD TO 128 STD | 743513 4202-906 BOO,OO | 
UFGRADE 22 STD TO 22 HIGH SFEED 74ABAO 4202-905 500,000 | 
UFGRADE 22 STD TO 64 HIGH SFEED 7432128 - 4202-906 L000. 000 | 
UFGRADE 22 STD TO 64 STD 7T4ASL 1 4202-906 600,000 
UFGRADE> 32k HIGH SFEED TO 126K HLS. 74S2L0 4202-908 BOD. OOO 
UFGRADE 22k HIGH SFEED TO 464K HIGH SFEED 747319 4202-906 600,000 
UFGRADE 64 STD TO 44 HIGH SFEED 743135 AZIS-9OS6 G00.000 | 
UFGRADE 64k HIGH SFEED TO 128K H.S. TABS 1 4202-906 400,000 | 
UFGRADE 64K STD TO 128k HIGH SFEED 74317 AZOS-906 BOO. O00 | 
UF GRADE 44k STD TO 128K STD 74316 4202-906 400.000 
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Cables - Upgrades 


06/01/87 


MISCELLANEOUS FART NUMBERS 


FART DESCRIFTION FART ITD) 


16 FIN DIF CLIF 21036 
(note: usually shipped in units of &) 
4OPINCLIF 40 FIN DIF CLIF 21037 
ABFPINCLIF 48 FIN DIF CLIF 21038 
64F70NADFT 64FIN 7ZOMIL MEU ADAF TER 74008 
G4FPINCLIF 64 FIN DIF CLIF eLOAS. 
E220 22£QVAC/SOHZ FOWER SUPFLY 40003 
PR40SK 40 FIN TEST SOCKET HLS 
FPR4BADAFT ADAPTER 48F IN FIGGYBACK 21062 
FGADIF ADAPTER 64FIN FGA-TO-DIF TAOQOL 
FFA PROG. FERFORMANCE ANALYZER 87001 
FROGO UNTILAB FROGRAMHMERS GUIDE B7 008 
QUIFADAFT 64 FIN QUIF ADAFTOR 74009 
UDLMAN UDL MANUAL BS1O40 
UNT2MAN UNTLAE ‘MANUAL 82040 
UFGRADE/E UDL REV. B UPGRADE FASE 


XASM CROSS ASSEMBLER SEE ANNIE 
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STD COST 


4202-906 


ABIL -FGOS 
ABOP=-FOS 
ABOIZ-GOG 
ABOB-FOS 
ASOR-GIG 
ABOR-FOS 
4202-906 
AZOS—-FOG6 
4203-907 
AZSOL-FO1 
A 22-90% 
AZOL-FOd 
4201-901 
ABOZ-FOS 


4202-906 


LIST PRICE 


$15.00 


St OO) 


45.00 


190,00 
Fe. OO 
150.00 


FE OO 
2.00 
Bo. OO 
4o.0Q0 
woe OO 
1a0a,0a 
he en 
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HOW PGBASED ENGINEERING INSTRUMENTATION SPEEDS 


MICROPROCESSOR DEVELOPMENT TIME 


by Thomas R Blakeslee, Orion Instruments Inc. 
Redwood City, CA 
Personal computers have become so cost effective that it is 
now practical to put a complete, PC-based, integrated micro- 
processor development system on the engineer's desk. With 
this power, project development time can be reduced signifi- 
cantly compared to traditional methodologies. 

With the increased use of microprocessors in development 
projects, debugging time is becoming more and more of a major 
issue. While standard debugging techniques on conventional 
development systems can get the job done, weeks or months are 
often wasted tracking down subtle bugs. 

With the Integrated iioerumencaeion bes approach, a bus 
state analyzer is integrated into the development system so that 
the repertoire of debugging techniques is greatly expanded. In 
addition to the normal in-circuit-emulator techniques of setting 
breakpoints and single-stepping, you can now record real-time 
traces of program operation without stopping the processor. 
Complex triggers can be set up based on data, cycle types, and 
address ranges to capture precisely the circumstances which led 
to the undesired condition. | 

Orion's Universal Development Laboratory, the UDL, and now 
the new generation UniLab II model, provides all the ee 


necessary to convert a personal computer into a complete I 


development system. This system includes real-time in-circuit 
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emulation, a 48-channel bus state analyzer, an EPROM programmer, 
and a stimulus generator. All four instruments are controlled by 
an integrated control program running on the personal computer via 
an RS-232 port. Since only command and control data is passed 
over the RS232 link, system response is instantaneous from the 


user's perspective. 
FINDING NASTY BUGS 


If we analyze where the time is spent in real development 
projects, we usually find that the initial design and debugging 
is not usually the real problem. Generally schedules start 
slipping when an inordinate amount of time is spent on one or more 
bugs which are really nasty in that they occur at mysterious times 
which are impossible to define as simple breakpoints. This is 
where the built-in bus state analyzer in an - development system 
can save the day. 

A bus state analyzer is essentially a logic analyzer which 
is optimized for recording a trace of microprocessor bus cycles 
in real-time. It differs from the trace buffer found on many 
emulators in that it can record bus cycles on the fly, without 
stopping the target processor at a breakpoint. It also has 
powerful triggering logic capable of triggering on much more than 
just address breakpoints. Since the trigger specification 
determines which portion of program operation you will view, good 
trigger logic should make it possible to trigger on the symptom 
of the bug rather than just at a specific address. 

The analyzer in the UniLab II provides four complete sets of 


truth-tables so that triggers and qualifiers can be defined which 
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look for any logical function at each of the 6 input bytes. It 
is thus possible to trigger on specific cycle types, being inside 
or outside of specific address ranges, specific data 
combinations, and configurations of input and output signals. 

All of the normal emulator debugging functions such as 
single-stepping, stopping at a breakpoint, and displaying and 
changing target registers and memory are also available from the 
same integrated control program, so you can use the analyzer or 
the emulator as required. Program and symbol table loading, PROM 
programming, and stimulus generator commands are also integrated 
into the same control program. 

In a conventional development system, emulator breakpoints 
are the main tool used in finding program bugs. The reason that 
nasty bugs take so long to find on such systems is that the bug 
is often in an entirely unexpected part of the program, so 
setting breakpoints at the expected places turns out to be a 
waste of time. With a built-in analyzer, you can generally find 
the bug quickly by triggering the analyzer on the symptom. 

For example, if out-of-range data is being written to a 
particular memory location, you can define an analyzer trigger to 
look for the symptom, then look at the trace to see what part of 
the program wrote the bad data. Generally the trace itself shows 
you what the bug was, but if you want to single-step in the 
defective part of the program, you have now identified where to 
set the breakpoint and what to look for. 

Generally trigger specifications are entered in commands 


which resemble plain english. For example, WRITE FO TO FF DATA 
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8000 TO 8080 ADR will cause the analyzer to trigger if data 
greater than FO is written to any address between 8000 and 8080. 
Note that since this trigger is a description of the symptom 
itself, it will find the problem even if it comes from unexpected 


parts of the program or even defective hardware. 
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Test hardware 
helps pinpoint 


SO 


Setting breakpoints through the use of soft- 
ware debugging tools can solve some of your 
problems, but other bugs are more difficult 
to isolate and fix. Your chances of doing so 
improve considerably when you add an in- 
circuit emulator and a bus-state analyzer 
to your debugging arsenal. 


Thomas R Blakeslee and John S James, 
Orion Instruments 


Hardware-assisted software debugging of programs 
can help you track down quickly the hard-to-find or 
subtle bugs that might otherwise delay a project for 
weeks or even months. Typical examples include inter- 
rupt-related and other timing-critical bugs that you 
can’t reproduce; errors that appear only while the 
system is running at full speed; and system crashes that 
occur very infrequently (often only once in days or 
months) and that wipe out all evidence of what went 
wrong. 

Using traditional, software-only debugging tech- 
niques, you may spend weeks looking for the bug, and 
even then you may never find it at all. Inspection of the 
source-code listings may not tell you anything useful, 
and trying to check progress of the program is a slow 
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business because you have to set breakpoints by trial- 
and-error methods. Besides, breakpoints have a num- 
ber of limitations. | 

First, if the program never reaches a breakpoint, but 
instead ends up in a loop or crashes, there may be no 
indication of how the program reached the point at 
which it looped or crashed, and what operations caused 
that event. Second, you can only trap instruction execu- 
tion points; you have no way of trapping other bug 
symptoms, such as the writing of garbage to the 
memory. Third, breakpoints don’t give you any record 
of the machine activity leading up to the breakpoint (or 
the crash). Finally, breakpoints stop all processing, so 
the information they give you is inadequate to identify 
bugs related to real-time interactions. 


Hardware extends breakpoint capability 


This is not to say that breakpoints are useless; on the 
contrary, they are quite adequate for finding some 
types of bugs. When breakpoints are appropriate, you 
can make them more effective by using an in-circuit 
emulator, which provides all of the basic breakpoint 
functions of a software debugger (stopping at a 
breakpoint, single-stepping, and displaying and chang- 
ing registers and memory). 

The emulator has several advantages over the soft- 
ware debugger. First, the emulator can work with 
ROM-resident programs. Second, it retains control at 


all times. Consequently, it can prevent the program 


under test from overwriting or destroying either the 
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Using traditional, software-only debugging 
techniques, you may spend weeks looking for 
a bug, and even then you may never find 
it at all. 


ee oe 


LISTING 1 
cy# CONT ADR DATA 
-5 B7 OOA6 20FA JR NZ,START-LOOP 
-3  B7 OOA8 C9 RET 
-2 F7 17FE FF read 
-~l F7 17FF FF read 
O B7 FFFF 1831 JR 32 


debugger or the operating system. Also, you can stop 
the program under test at any time to examine regis- 
ters and memory—a facility that very few debuggers 
can provide. 

When the bug is so complex or subtle that you have 
no idea where to set breakpoints, a hardware bus-state 
analyzer can be even more helpful. The analyzer contin- 
uously records bus cycles while the program runs at full 
speed. It saves all bus information, up to the limit of the 
available trace-buffer memory, which is usually hun- 
dreds of cycles. 


Bus-state analyzer tests all cycle types 


Meanwhile, the analyzer tests all cycles, looking for 
any requested combinations or sequences of values. For 
example, if the program is writing bad data into an 
array or any other part of memory, you could have the 
analyzer test for a write operation that specifies a 
range or set of data values written into a range of 
addresses that correspond to the array. When the 
conditions you specified occur, the analyzer will trigger 
and stop collecting new bus cycles. Then you can 
examine the trace, using such tools as a symbolic 
disassembler, to see not only what instructions wrote 
the bad data, but also what happened before the 
instructions were executed. 

The trigger specification can involve more than a 
single cycle. For example, you could specify two or 
more independent tests that must occur on sequential 
bus cycles. More commonly, a delay count delays the 
trigger for a given number of cycles after the other 
conditions are met; this count allows you to see what 
happens after the triggering event, as well as before it. 
Other analyzer capabilities include filtering (selecting 
only certain cycles) and counting the exact number of 
cycles between two points of a program. 

Analyzers watch the program run at full speed, with 
complete transparency. What’s more, the methodology 
of triggering on the symptom of the bug avoids the 
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guesswork of where to place breakpoints, which must 
in any case stop the program in order to be useful. An 
integrated analyzer-emulator can provide the best of 
both worlds: It can trigger in response to the symptoms 
of a problem and use a nonmaskable interrupt (NMI) to 
simulate a breakpoint at that time. Also, integrated 
analyzer-emulators provide most or all of the following 
features: 

@ The analyzer can cause a scope or other external 
equipment to trigger as a result of any of the 
logical tests mentioned previously. 

e You can progressively append new tests to the 
trigger specification, and you can display the 
cumulative specification at any time. 

e@ You can save the current state of the work as a 
disk file, and later continue from where the 
session left off. The file can include macros speci- 
fying sequential software tests for automated 
testing of hardware. 

e An analyzer can run unattended for weeks if 
necessary, perhaps at a customer’s site. When a 
problem arises, the analyzer will save the trace 
for local examination, or for transmission by 
telephone. 

e An analyzer with automatic reset can restart the 
system after a crash. Adding new tests to the 
trigger specification or inspecting a different area 
of the trace after each crash will add new data to 
help you identify the problem. 


See the analyzer in action 

Two examples show how to use an integrated analyz- 
er-emulator to find the cause of a crash and how to 
check that a loop is operating correctly. The first 
example is the debugging of a Z80 program that has a 
tendency to work properly for about a minute and then 
crash. The program code occupies locations 0 through 
1000uzx; RAM occupies locations 1800yex through 
IF FF uex. 
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LISTING 2 


resetting 


ADR 


-5 B7 OOA6 20FA JR NZ,START-LOOP 
-3 B7 OOA8 C9 RET 
-2 F7 17FE FF read 
-l1 F7 17FF FF read 
O B7 FFFF 1831 JR 32 
resetting 
cy# CONT ADR DATA 
-5 B7 OOA6 20FA JR NZ,START-LOOP 
-3 B7 O0OA8 C9 RET 
-2 F7 17FE FF read 
-1 F7 17FF FF read 
O B7 FFFF 1831 JR 32 
resetting 
cy# CONT ADR DATA 
-5 B7 OOA6 20FA JR NZ,START-LOOP 
-3 B7 OOA8 C9 RET 
-2 F7 17FE FF read 
-l F7 17FF FF read 
O B7 FFFF 1831 JR 32 


_——__-—-—_———— eee 


The first step is to set up the analyzer to look for 
instruction-fetch cycles at addresses outside the code LISTING 3 
area. When the program crashes, the screen displays 
the instruction trace (ie, the contents of the trace 
buffer) shown in Listing 1. Sure enough, the program 
is attempting to execute an instruction at FFF Fyex; the 
RET instruction is trying to read the stack at 17F Fuex, 
where there is no RAM. The stack pointer was initi- 
alized to 18F Fyex, so it appears the bug is a stack 
overflow. 

The second step is to use the analyzer’s start-and- 
repeat feature to see whether the error is always the 
same. The command 5 SR starts the analyzer and 
target program, displays five lines of the triggered 
display, then resets the target system and restarts both 
the target program and the analyzer. This sequence 
continues indefinitely until you stop it by pressing a 
key. In the case of an intermittent crash, you could send 
the screen output to a printer or to a disk file, in order 
to gather, over a period of hours or days, data on all 
conditions leading up to a crash. The resulting trace 
(Listing 2) confirms that the crash does occur in the 
same way every time. 


cy# CONT ADR DATA 
FOl B7 OOA8 C9 

FO2 F7 18FA 90 read 
FO3 B7 OOA8 C9 

FO4 F7 18F8 90 read 
FO5 B7 OOA8 C9 

F06 18F6 90 read 
FO7 OOA8 

FO8 18F4 read 
FO9 00A8 

FOA 18F2 read 
FOB OOA8 

FOC 18F0O read 
FOD OOA8 

FOE 18EE read 
FOF OOA8 

F10 18EC read 
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In the case of an intermittent crash, you 
can send the screen output to a printer or a 
disk file in order to gather data on condt- 
tions leading up to a crash. 


The third step is to use the analyzer’s filter feature to 
obtain a better understanding of the stack-overflow 
problem. Filtering means that the analyzer examines 
the inputs in real time and keeps only certain bus cycles 
in the trace buffer. You could also include the cycles 
after each of the selected ones. In this case, you’d use 
these features to look at the RET instruction at address 
A8uex and the stack address accessed by that instruc- 
tion. The trace (Listing 3) shows that each time the 
program reaches address A8uyex, the stack pointer 
address decreases, indicating that at some point the 
program is pushing a 16-bit value onto the stack but 


never popping it off again. You know this event is 
occurring sometime after the program reaches address 
A8yex, So you can ask for a trace that triggers on that 
address and shows three cycles before the trigger and 
10 cycles after it. 

The resulting trace (Listing 4) shows that there’s a 
Push command at address 8Buex that could be the cause 
of the problem; reference to the program listing shows 
that, in fact, the Push instruction doesn’t belong there. 
You can test this idea immediately by storing a zero (a 
no-op instruction) to memory location 8Byrx with a 
simple monitor command. After making that change, 


LISTING 4 
cy# CONT ADR DATA 
-5 B7 00A3 20FD JR NZ,START-LOOP 
-3 B7 OOA5 25 DEC H 
-~2 B7 OOA6 20FA JR NZ,START-LOOP 
O B7 OOA8 C9 RET 
1 F7 18FA 8F read 
2 *F7 18FB OO read 
3 B7 OO8F C38800 JP SEND-OUT 
6 B7 SEND-OUT 0088 D379 OUT (LEDS),A 
8 5F 8079 80 out 
9 B77 OO8A OF RRCA 
A B7 OO8B D5 PUSH DE 
B D7 18FB 40 write 
Cc D7 18FA 20 write 
D B7 0O08C CDAN0O CALL DELAY-SUB 
LISTING 5 
cy# CONT ADR DATA 
-5 B7 OOA3 20FD JR NZ,START-LOOP 
-3 B7 OOA5S 25 DEC H 
-2 B7 OOA6 20FA JR NZ,START-LOOP 
O B7 OOA8 C9 RET 
1 F7 18FC 8F read 
2 *F7 18FD 00 read 
3 B7 OO8F C38800 JP SEND-OUT 
6 B7 SEND-OUT 0088 D379 OUT (LEDS),A 
8 5F 8079 80 out 
9 B7 OO8A OF RRCA 
A B7 OO8B 00 NOP 
B B7 008sc CDAN0N CALL DELAY-SUB 


S| NE LL 
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the program seems to run correctly (Listing 5), indi- 
cating that the intrusive Push instruction was in fact 
the reason for the crash. 

You now have a small hierarchy of choices: You can 
immediately burn an EPROM that contains the modi- 
fied program or save the patched program to a disk file 
directly from the emulator memory, or you can enter 
the DOS command to return to PC-DOS so that you can 
edit and reassemble the program. 


If you prefer to fix several bugs before correcting the 
source code, you can invoke a logging feature that will 
automatically send just your patches (not the rest of the 
screen output) to the printer. You can safely continue 
the session after making each patch and then later 
correct the source code from the fixes recorded in the 
printed log. 

A second example shows how you use the cycle- 
counting feature of an analyzer-emulator to check a 


LISTING 6 
21FF40 


DELAY-SUB 
START-LOOP 


LD HL, 40FF 

DEC L 

JR NZ,START-LOOP 
DEC H 

JR NZ,START-LOOP 
RET 


“AF@8051 (sZ-A-pnC) BC= 
DELAY-SUB OOAO 21FF40 


O DE= 


(a) 


NMI 


OOA4 20FD 


(b) 


EDN September 4, 1986 


LISTING 7 


20 HL=FFFF 
LD HL,40FF 


AF=8051 (sZ-A-pnC) BC= O DE= 20 HL=4O0FF IX=#1234 LY=#5678 SP=#18FC PC=#A3 | 
START-LOOP O00A3 2D DEC L r (next step) 
NMI 3 : 
AF=80AB (Sz-a-pNC) BC= QO DE= 20 HL#40FE IX#21234 IY=5678 SP=#18FC PCHA4 . 

OOA&4 20FD JR NZ,START-LOOP (next step) | 
NMI 


AF=80AB (Sz-a-pNC) BC= O DE= 20 HL#=40FE IX21234 IY=#5678 SP#l8FC PC=A3 | 

START=-LOOP OO0A3 2D DEC L (next step) 

NMI : 

AF=80AB (Sz-a-pNC) BC= O DE= 20 HL=40FD 1X#21234 IY#5678 SP=#18FC PC=HA4 
OOA4 20FD JR NZ,START-LOOP (next step) : 

NMI 


AF=80AB (Sz-a-pNC) BC=# O DE=s 20 HL#40FD IX#1234 IY=5678 SP=#18FC PC=#A3 © 
START-LOOP OOA3 2D DEC L (next step) 

NMI 
AF=80AB (Sz-a-pNC) BC= O DE= 20 HL=40FC IX#21234 IY=5678 SP=xl8FC PC=#A4 


JR NZ,START-LOOP 


IX=#1234 IY¥=5678 SP#l8FC PC=#AO | 


(next step) 


(next step) 
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You can safely continue a session after mak- 
ing each patch and then later correct the 
source code from the fixes recorded in the 
printed log. 


ene DanInnnenenannanennentmmnnamenemenes 


delay routine very quickly. Listing 6 shows the listing 
of a typical routine consisting of an inner loop that runs 
FF yex times, and an outer loop that runs 40yf, times. 
This listing was disassembled directly from RAM mem- 
ory in the emulator, because when you’re testing a 
program, the emulator must keep full control of execu- 
tion. The emulator can’t exercise that control if the 
program resides in ROM, so the emulator always copies 


the program from ROM into its own RAM for test 
execution. 

If you’re using only software debugging methods, 
you'll have to single-step through the loop, examining 
the registers at each step to ensure that the correct 
number of iterations are executed. To single-step 
through the loop, you must first have the software 


LISTING 8 
cy# CONT ADR DATA 
-4 B7 START-LOOP OOA3 2D DEC L 
-3 B7 OOA4 20FD JR NZ,START-LOOP 
-l]1 B7 START=-LOOP OOA3 2D DEC L 
QO B7 OOA4 20FD JR NZ,START-LOOP 
2 B7 OOA6 25 DEC H 
3 B7 OOA7 20FA JR NZ,START-LOOP 
5 B7 START-LOOP OOA3 2D DEC L 
6 B7 OOA4 20FD JR NZ,START-LOOP 
8 B7 START-LOOP OOA3 2D DEC L 
9 B7 OOA4 20FD JR NZ,START-LOOP 
LISTING 9 
cy# CONT ADR DATA 
-5 *F7 OOA5 FD read 
-~4 B7 START-LOOP OOA3 2D DEC L 
-3 B7 OOA4 20FD JR NZ,START-LOOP 
-l1 B7 OOA6 25 DEC H 
O B7 OOA7 20FA JR NZ,START-LOOP 
2 B7 OOA9 C9 RET 
3 F7 18FC 90 read 
4 F7 18FD 00 read 
5 B7 0090 C38800 JP 88 
8 B7 0088 D379 OUT (LEDS),A 
A 5F 8079 80 out - 
B B7 OO8A OF RRCA 
C B7 OO8B 14 INC D 
D B7 008Cc 00 NOP 
5 B7 008D CDAN0N0 CALL DELAY-SUB 
ll D7 18FD OO write 
12 D7 18FC 90 write 
13. B7 DELAY-SUB OOAO 21FF40 LD HL,40FF 
16 B7 START-LOOP OOA3 2D DEC L 
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A quick and elegant way to make sure that 
a loop works properly 1s to use an analyzer 
command to count the number of cycles 
between two points in the program. 


breakpoint at address AQuyrx; you'll see the display 
shown in Listing 7a. As you can see from the contents 
of the program counter (PC), the instruction at address 
AOuex has not yet been executed. 

Once you've established debug control, you can step 
through the program by pressing a function key that 
generates an NMI, thereby allowing the program to 
execute just one instruction. You can continue stepping 
through the program in this manner for as long as you 
like (Listing 7b), but you will soon find that going 
through tens of thousands of steps quickly gets boring. 


Analyzer counts program cycles 


A much quicker and more elegant way to make sure 
that the loop works properly is to use an analyzer 
command to count the number of cycles between two 
points in the program. If, for example, you enter the 
command “AO A6 CYCLES?”, the response will be “= 
300”, indicating that 300uEx cycles were executed be- 
tween addresses AOuex and A6yrx. The LD HL instruc- 
tion takes three cycles, and the two instructions that 
compose the inner loop take a total of three cycles. 
The total for the inner loop’ should be 
3+(3X FF uex)=300yex; the display thus indicates that 
the inner loop works as desired. 

To check the operation of the entire delay subroutine, 
just enter “AO A9 CYCLES?”; the response is “= 
COCO”, which is 40<303yrx. This response confirms 
that the outer loop (which includes the inner loop plus 
three cycles) was executed 40 times. This cycle-count- 
ing technique is excellent for making gross checks on a 
new program to see what parts of it are or are not 
functioning as intended. 

To examine loop operation more closely, you can set 
the analyzer trigger to show only the interesting parts 
of the trace. For example, to look at the end of an inner 
loop, you can set the trigger to wait until address A3, 
the decrement instruction in the inner loop, has oc- 
curred FFyex times. Listing 8 shows the resulting 
trace. The trigger cycle (cy#0) is the next instruction 
after the FF th pass round the inner loop. You'll see that 
on completion of this pass, the outer loop correctly 
decrements the H register (cy#2), after which the 
inner loop resumes. Similarly, you could trace the exit 
from the subroutine by triggering on the fortieth 
iteration of the outer loop. The resulting trace (Listing 
9) shows the correct completion of the fortieth iteration 
and the return to the section of code that called the 
delay subroutine. 

In general, if you find yourself spending long hours 
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single-stepping through programs, or pouring over 
program listings looking for errors, you are probably 
wasting a lot of time. The ideal debugging technique is 
to use analyzer triggers or breakpoints or both, as 
appropriate. A development system that includes an 
integrated analyzer-emulator renders both techniques 
available to you at all times. =DN 
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Excerpt from the forthcoming McGraw-Hill 


textbook on microprocessors 


by 


DR. JOHN PEATMAN 


GEORGIA INSTITUTE OF TECHNOLOGY 


EEMULATOR/LOGIC ANALYZER DEVICES 


The broad acceptance of the IBM PC as a standard around which products can 
be built has made relatively low-cost emulation and logic analysis possible. As we 
discussed in the last section, the logic analyzer in a full-featured development 
system gives the designer an outstanding view of what the microcontroller is doing. 
The ability to capture and display data can also be achieved in a unit which uses. 
an IBM PC for its display, for command entry, and for formatting captured data. 

A particularly intriguing unit is Orion Instruments’ Universal Development 
Laboratory (UniLab Il), shown in Fig. 7-17." The designers of this unit have 
developed a universal hardware interface for a large number of microprocessors. It 
includes a plug for a ROM socket, which picks up the data bus and most of the 
address bus lines. Then it includes a DIP clip to probe the remaining address and 
read/write control lines on the microprocessor itself. In this way, the UniLab is party 
to all bus activity. Furthermore, by having access to microprocessor through the 
ROM address space, the UniLab presents a rather non-invasive addition to the 
target system. That is, the target system runs with the microprocessor in its own 
socket, being clocked by its own clock. 

The UniLab monitors a// bus transactions. It exerts control by the program 
instructions which it presents to the microprocessor in the ROM address space. In 
a sense, it exerts control like the BUFFALO monitor discussed in conjunction with 
the circuit of Fig. 7-7.* However, with more sophisticated hardware control, the 
monitor instructions are switched into and out of the ROM address space. 


Consequently, the monitor does not consume any of the target ROM or RAM space. 


Code is written for the target system using the target system's ROM and RAM 
addresses, not some intermediate addresses (as had to be done for the circuit of 
Fig. 7-7*). 


(The next section, which describes various target systems, 
has been omitted for brevity.) 


Because of the universality of the hardware of the Orion UniLab, it is less 
expensive than other emulator/logic analyzer units. Its customization comes 
through the software which is downloaded from the IBM PC to the UniLab for 
doing monitor-type jobs. The software which runs on the IBM PC must also be 
customized for disassembling the instructions which the CPU has executed and 
for customizing the display of CPU registers. 

The logic analyzer built into the UniLab is 48-bits wide and can collect 170 
memory transactions. Since 48 input lines are more than are needed to monitor 
just the address bus and data bus structure, the extra lines can be used to probe 
other parts of the circuit (e.g., the of the microcontroller chip). An example display 
of a trace is shown in Fig. 7-21”. 

One key to the potential power of a logic analyzer is its ability to set up and use 
complex triggering conditions. As the microcontroller executes hundreds of 
thousands of instructions per second, we want to be able to trigger on just that 
condition which warrants our attention. The UniLab unit permits us to trigger after 
four successive conditions have been met on the 48 lines. It permits triggering on 
any access within a specified address range, or on any access outside a specified 
address range. It permits triggering on the ANDing of simultaneously occurring 
conditions and the ORing of alternative conditions. An arbitrary delay can be 


interposed after triggering occurs and before data is collected. It can be told to 


collect only those events which meet the trigger condition. Alternatively, it can 
collect this trigger condition plus the one, two, three, or four cycles which follow the 
trigger condition. 

As an example of the power of a good logic state analyzer, consider the case in 
which an algorithm works fine when run by itself. However, when this algrorithm is 
run in conjunction with the complete instrument or device software needed by an 
application, one of its variables becomes corrupted. The UniLab permits us to 
trigger only on writes to the variable and to collect not only the data written to that 
address but also the memory transaction which takes place during the following 
CPU cycle. In this way, we can see where the following instruction is fetched from 
and determine the offending part of the program. 


(At this point, Dr. Peatman describes the 
support for families of microprocessors.) 


a en et ee ee ee 
«Figures and Illustrations in preparation. 


Orion Express Rolls On 


This Newsletter is designed to provide Orion customers 
with important and useful information to help you get 
the most from your Orion purchase. It contains product 
facts from our engineering and marketing staff as well 
as contributions from our customers. 


We invite you to share your experiences, questions, 
and “discoveries” with other Orion users through this 
Newsletter. Please mail your material to the attention of 
Editor, Orion Express. Naturally, we'll give you credit for 
any contributions. ORION 


UniLab Macros for the 
Power User 


The UniLab command set can be easily extended by 
creating custom commands specific to your needs. The 
basic techniques are to use combinations of commands 
to form Macros, and to use PC-DOS's “command tail” 
feature to pass these macros to the UniLab from the 
keyboard or from a DOS batch file. 


For example, if you switch back and forth often between 
the UniLab and a cross-assembler to make progressive 
changes in your code, you may have found yourself 
entering commands like this each time you re-enter the 
UniLab system: 


O 7FF BINLOAD TARGET.BIN (load new binary file 
from cross assembler) 


SYMFILE TARGET.SYM (load new symbol table 
from cross assembler) 


STARTUP (Start the target system up from reset) 


42F RB (get a breakpoint at address 042F, reset still 
on from STARTUP) 


NMI (single step) 
NMI (single step again) 


There are a couple of ways you can automate much of 
this procedure. 


Automate your procedures 


If you wanted to automate only the file loading part, you 
could make a macro called LOAD-FILES like this: 


LOAD-FILES 0 7FF BINLOAD TARGET.BIN 
SYMFILE TARGET.SYM ; 


Now, every time you want to load in the binary file and 
symbol file with these names you just type LOAD-FILES. 


Suppose you change the name of the binary file for 
different versions. You can construct another macro a 
little differently to make it prompt you for the file name 
when you enter LOAD-FILES1: 


LOAD-FILES1 0 7FF 
SYMFILE TARGET.SYM ; 


[COMPILE] BINLOAD 


Using the command [COMPILE] immediately before 
BINLOAD causes BINLOAD to ask for the file name 
when the macro is executed, rather than when the macro 
is defined (compiled). You could also have preceded 
SYMFILE with [COMPILE] and then a macro called 
LOAD-FILES2 could prompt you for both file names. 


More time savers 


The second part of your procedures could also be 
automated by a macro command. For purposes of this 
demonstration, let's define a macro and name it RUN. 


RUN STARTUP 42F RB NMI NMI; 


Now, you can just tyoe LOAD-FILES RUN to do. 
everything. 

One point: If you wanted to set the breakpoint at an- 
other address, you would have to retype in all of the 
commands that are in the RUN macro separately. If 
RUN were defined without the 42F address, then you 
could supply the address as a parameter to the macro 
when it was executed, like this: 


RUN+ STARTUP RB NMI NMI ; 


This allows you to execute 42F RUN+ or 174 RUN+ , 
or any address you want. 


Putting these two together produces a macro which 
can save you a lot of keystrokes: 


LRUN LOAD-FILES RUN+ 
(continued on page 2) 


(continued from page 1) 


Create your own custom UniLab 


Now, if you save your customized UniLab system to 
disk with SAVE-SYS, your new commands will be 
permanently added to the regular command set of your 
system. You can get rid of them by typing FORGET 
LOAD-FILES. (Using FORGET will delete every new 
macro made since LOAD-FILES was defined, 


There is another technique which can take the place of 
some of these commands, or can be used to extend 
them even further. 


If you had defined these commands and saved the 
system, you could enter the system and execute the 
commands immediately by entering from DOS: 


C>ULZ80 42F LRUN 


Now this “command tail” will be executed by the 
UniLab after it boots up. 


You also could have entered the comands separately: 


C>ULZ80 0 7FF BINLOAD TARGET.BIN 
SYMFILE TARGET.SYM 482 RUN+ 


(Note: Type as one line on screen or in batch file.) 


Using the command tail lets you make very useful batch 
files. You may already have a batch file to use with your 
cross-assembler. By adding an additional line like the 
one above, you can quickly get from DOS into your 
editor, then to your cross-assembler to assemble a new 
file, and finally to the UniLab, executing commands 
automatically. A real time saver. 


Now, if you end the command tail with BYE, then you 
would automatically exit from the UniLab, and be back 
in DOS, or the next line of your executing batch file. 


The power of DOS and the UniLab macro capability 
gives you great flexibility in setting up your own devel- 
opment environment. So have fun and let us Know what 
especially useful macros you create. See the article 
below for advanced programming information. ORION 
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SHOW SPECIAL 


UP TO 15% OFF ON A 
UniLab II". OptiLab” 


MICROPROCESSOR DEVELOPMENT 


TOOLBOX! 


TAKE ADVANTAGE OF ORION’S SPECIAL 
ELECTRO '87 DISCOUNT OFFER. 


CALL TOLL-FREE — TODAY! 
ah 
= (800) 245-8500 
IN CALIFORNIA CALL (415) 361-8883 


THIS OFFER HAS BEEN EXTENDED TO 
ALL CUSTOMERS THROUGH JUNE 15, 1987. 


New Programmer’s Guide 


A comprehensive new UniLab Programmer's Guide is 
available for advanced users of the UniLab and OptiLab 
systems. This 8% by 11-inch, 45-page document enables 
programmers familiar with the Forth programming lan- 
guage to write advanced macros utilizing the UniLab’s 
operating system. Differences fromm the PADS Forth 
system are noted, and special worcls are explained 
which are not covered in the UniLab manual. Material 
covered: 


File and Editor Commands 

Accessing the UniLab trace buffer directly 
UniLab String Package 

Changes to the PADS nucleus 


Examples of automated test routines are included, as 
is a source listing of the UniLab Forth nucleus. The 
manual, affectionately given Part Number “PROGO”, is 
priced at U.S. $45.00, including airmail postage, and is 
available from stock. ORION 


Ask Doctor D 


Each month our product gurus select interesting 
questions asked by users for inclusion in this 
column. Maybe some of Doctor D’s answers can 
help you too. 


Q. | understand the UDL and UniLab need four 
overlay bytes in ROM space. | have code at 
your overlay area. Is there anything | can do? 


A. All Disassembler/Debug (DDB) packages now 
have an =OVERLAY command to relocate the 
area that our DEBUG program needs. If you 
type HO or press Ctri-F3, the help screen for 
DEBUG will show the current location for the 
overlay area. One common mistake in changing 
the overlay area, is moving up too high. The 
amount of space needed varies from proces- 
sor to processor, but a good rule of the thumb 
is to keep the low byte of the overlay area the 
same or less than the low byte of the default 
overlay address. 


For instance, if the overlay area is currently set 
to FFB2, then don't try to change it to FFC4. 
This might make the overlay area cross a page 
boundary, or try to use non-existent emulation 
memory. In some processors it could even 
overwrite the reset and interrupt vector area. It 
is better to move it to FEB2 or FF20, allowing 
the overlay area to remain on a single page of 
memory. 


Send your questions to Doctor D. We'll publish 
the ones of most general interest, but if you'll 
include your phone number, we'll give you a 
personal call back. Write today! Right now! 


Do You Have the 
Latest and Greatest? 


Here’s a listing of the latest revisions of popular Orion 
software. Check to see which revision you have by 
typing the command: “.DDB” while in the Disassemble/ 
Debug (DDB) package. If you don’t have the latest, 
read below to see how you can get updated. 


PROCESSOR LATEST REVISION 


1802 October 23, 1986 
6301 May 4, 1987 

65P November 12, 1987 
6502 October 13, 1986 
6800 December 18, 1986 
6801 May 4, 1987 

6802 December 18, 1986 
6805 January 13, 1987 
6809E November 5, 1986 
68000 January 14, 1987 
68008 October 15, 1986 
68HC11 May 4, 1987 

8048 November 11, 1986 
8051 January 29, 1987 
8051P January 29, 1987 
8085 May 6, 1987 

8086 February 5, 1987 
8088 December 18, 1986 
8096 October 15, 1986 
SUPER 8 May 5, 1987 

Z-80 May 4, 1987 
Z-8000 October 21, 1986 
78312 May 4, 1987 


SYSTEM PREVIOUS LATEST 
SOFTWARE | RELEASE RELEASE 


UDL2.5 (Nov. 25, 1986) 
UNI3.3 (April 1987) 
OPT3.3 (April 1987) 


UDL MSDOS 
UniLab Il 3.2 
OptiLab 3.21 


2.42 


How to Obtain Latest Releases: 


Of course, if you haven't purchased a particular package 
from Orion, call your local Orion Sales Representative 
or our Sales Hotline to place your order. If all you need 
is an update, each is available for U.S. $50.00 including 
airmail postage. Subscribers to Orion’s Support Services 
Option receive updates free of charge. The Support 


Services Option costs just $500/year and gives you 
free updates plus unlimited free Applications Engineer- 
ing telephone support, and free factory repair of your 
unit in case of failure. Ask for full details. GRION 


New Convenience and 
Power for Your System 


Emulate with a MicroTarget” 


Many customers have wanted to test their software 
before they actually have their own target hardware up 
and running. Orion’s new MicroTargets allow you to do 
just that. The MicroTargets are completely functional 
circuit boards built around the most popular micro- 
processor types. They include RAM, Parallel 1/0, and 
in many cases timer chips. 


Even after your own target hardware is up, the Micro- 
Targets can provide a ready means of verifying that 
your Orion system is functioning properly. Microfargets 
can be purchased separately, and include the micro- 
processor itself and a schematic of the circuit. You may 
find that the MicroTarget is all the hardware you need 
for some smaller projects. 

Available MicroTargets are: 

63PO1 64180 6502 68PO5 68000 8031 8051P 
8085 8086MIN 8086MAX 8088MIN 8088MAX 
Z8 Z80. | 


Prices range from $150 to $300. 


Emulation Modules Speed Hookup 


As you probably know, Orion’s technique for perform- 
ing emulation functions uses an actual microprocessor 
in your target circuit. This technique, which we call 
In-Place Emulation, eliminates the timing and signal 
errors often experienced with conventional emulators 
due to long cables between processor and target. The 
result is that Orion allows your circuit to run at full 
speed while you observe the performance in real-time. 


Orion’s new line of In-Place Emulaton Modules™ make 
connecting your Orion system to your target circuit 
easy. Just remove your microprocessor from its socket 
and plug-in the Emulation Module! The cabling is all 
done for you, and all necessary connections are auto- 
matically made. Of course, if you have a soldered-in 
microprocessor or extremely limited physical space 
where the Emulation Module won't fit, you can still con- 
nect to your circuit with ROM cables and jumpers — 
another advantage of using the versatile Orion approach. 
Emulation Modules are available for these processors: 
6303R 63PO1 64180 6502 65C02 6805E2 
14-6805E2 6G8PO5WO 68POV07 6809E 6809 
68000 80188 8031 80031 8032 8048/P 8050 
8051P 87P50 80C51VS 8085 8086 (MIN/MAX/C) 
8088 (MIN/MAX/C) Z8 Z80. 


Prices range from $190 to $390. 


Call the Orion Sales Hotline, 800-245-8500 
for more information on these useful 
new products. GHION 
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June 12, 


TECHNICAL QUESTIONS & ANSWERS 


1987 


Host Requirements for the UniLab 


Q: What are the Host requirements? 


- Compatibility 


- DOS Version 


- Disk Drive 


—- Host Interface 


—- Interface Connection 


—- Copy Protection 


—- RAM Requirements 


- Monitor/Graphics 


IBM computer or 100% True 
Compatible 


Version 2.1 or greater 


Minimum of one (1) disk drive, 
preferably two (2) and 
ultimately a hard disk drive 


Via the RS232 High Speed data 
link into the RS232 C port 
(switch selectable @ either 
19,200 or 9600 baud) 


Requires a serial port 
configured for data 
communications equipment 
connection (modem) 


UniLab software is not copy 
protected - it can be copied 
to your hard disk for faster 
operation 


Minimum of 320K RAM for the 
UniLab - if you are also 
running the Program Performance 
Analyzer (PPA) you will require 
512K RAM 


Hercules compatible monitor 
card or EGA/CGA/RGB Text Mode. 
Color, black and white modes. 
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Common questions on UniLab Host Requirement: 


Can the VAX be used as the host? 


Yes. The UniLab is geared to work in a PC environment 
enabling it to use the power and flexibility of the PC 
however, CompuMech Corp., an OEM partner of Orion 
Instruments, has reconfigured the UniLab to work in a 
VAX environment. 


Can a host computer that runs MS DOS but is not an IBM 
or compatible run with the UniLab? 


No. The UniLab requires an IBM PC/XT/AT or true 
compatible. The UDL however, will run with a variety of 
machines that run DOS and are not IBM or compatibles. 


Can we use a CPM based computer as the host? 


The UniLab requires an IBM PC/XT/AT or true compatible. 
The UDL however, supports a variety of CPM formats 
depending on the exact type of host computer, 


Can the UniLab work with a dumb terminal as a host? 
No. The UniLab is designed to make use of the power and 


flexibility provided by personal computers. The power 
of the PC combined with the UniLab Software makes the 


UniLab a true engineering work station. 


Will other RAM resident utilities, i.e. SideKick, etc. 
conflict with the UniLab Software? 


Due to the speed of our communications we require full 
attention of the host. The UniLab, in most cases, does 
not run with background tasks or desk accessory 
programs. 
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EPROMS and KEPROM Programmer 


Q: 


EPROM Programming? 


Programming Variety Equipped to program most 
of the standard EPROMS on 
the market (from a 2716 
thru a 27256) - consult 
the spec sheet for listing 


Uploading from EPROM UniLab's programmer can be 
used for both uploading & 
downloading an EPROM 
directly from emulation 
memory 


Types of EPROMS UniLab will program & read 
both NMOS & CMOS EPROMS. 


Speed of Programming Using a smart programming 
algorithm, the Unilab 
programs almost as fast as 
Data I/O. 


Common questions on the EPROM & EEPROM Prograsming 


Will the UniLab program the 27512? 


The UniLab will program the 27512 with the optional 
PM512 module. You will also need at least 64K of 
emulation memory in an 8 bit application or the 128K 
model in a 16 bit application. 


Will the UniLab program PAL's and Array Logics? 


No. However, the UniLab can program almost any EPROM. 


Will the UniLab program a 2708 EPROM? 


No. The 2708 is an older style 1K EPROM that needs an 
additional 12V supply which is not provided by the 
Unilab. 


Is the UniLab available without the EPROM programmer? 
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As The EPROM programmer is a built in feature of the UniLab 


which cannot be removed. 


Q: Can the UniLab program a microcontroller or single chip 
micro with internal EPROM? 


A: No. However, a variety of manufacturers are now 
providing adapters which allow a PROM programmer to read 
the EPROM inside a single-chip micro as a standard EPROM 


The Stimulus Generator 


Q: Stimulus Generator? 


Description 


Operation 


—- Features 


- Uses 


The Stimulus Generator is part 
of the Bus-State Analyzer Cable 
which plugs into the EPROM 
programming socket bringing the 
signal out to .025 receptacles 


The Stimulus Generator sends a 
known bit pattern to the target 
and uses the UniLab to read the 
processor I/O port 


Generated from the EPROM 
programmer circuit, it allows 
the capability to set/reset as 
a group, individually or to 
produce a repeating pattern of 
8 signals from the keyboard 


In system checkout, the 
capability to build a switch 
panel to allow system inputs to 
be changed easily. The UniLab 
provides eight latched output 
bits - controlled from your 
keyboard - used for system or 
I/O checkout : 
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Common questions on the Stimulus Generator 
Q: Will the Stimulus Generator provide signature analysis? 


A: Not the traditional signature analysis, although you can 
use the generator to change the inputs to the target 
system in sequence and then compare the resulting 
traces. 


Triggering for the Analyzer Function 


Q: What type of inputs can the analyzer trigger on? 


A: In addition to the address, data and control lines, the 
UniLab has an extra eight miscellaneous inputs which can 
be hooked up to external signals anywhere on your board 
for extra triggering capability. You can also delay the 
trigger to begin a trace after the event has occurred, 
i.e. you can start the trace after the event has 
occurred 50 times. There is also a filtering 
capability that allows you to exclude/include a range of 
addresses, i.e. as in excluding loop cycles which 
otherwise could completely fill the trace buffer. 


Q: Can the UniLab trigggr on a write to the internal RAM? 


A: Yes. The UniLab has the capability of triggering on a 
particular register value by patching the target program 
so that the register value appears on the bus. The bus- 
state analyzer can then see it and get a trace or 
breakpoint. 


Q: Can the UniLab cross-trigger between the analyzer and 
emulator? 


A: Yes. Using the RI SI command, the same triggering power 
of the analyzer can trigger a breakpoint from the 
emulator. 
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Hook-up or Connecting to the Target 


— Connection For the most popular 
processors, In-Place Emulation 
Modules(tm} are available. 
This allows you to simply 
remove your CPU from your board 
& plug the emulation module in 
its place 


For less popular processors, 
our traditional hook-up 
consists of clipping a dual in 
-line package over the CPU & 
connecting the cable to that. 
A separate emulation cable, 
with a ROM plug, is plugged 
into the ROM socket. 


Common Questions on Target Hook-up and Connection 


What are the advantages of connecting to my target using 
the emulation modules? 


Functionally, there are no differences between using the 
emulation modules or the standard hook-up arrangement. 
The main advantages come from the ease of use and the 
durability. In addition, the emulation modules will 
allow you to run with your ROMS still in your target 
board. This is especially useful in using the analyzer 
in a completely transparent, passive analysis mode. 


How would I hook-up to my single chip micro with 
internal ROM or on-board ROM? 


Most processors with internal ROM also have a piggy-back 
version. Using the piggy-back version for development 
is faster because you don't have to burn a new micro- 
controller for every change you make in your code. Some 
processors also have ROMless versions with off-board 
ROM. With a ROMless application, Orion's emulation 
modules would plug directly into the CPU socket. We 
also make several piggy back emulation modules. 
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‘My board has four ROMs. Do I need four ROM plugs? How 


do we hook-up two or more ROMs with just one ROM plug? 


Orion's use of the ROM is an easy way for us to pick up 
the required address and data lines. You simply need to 
remove your ROMs from the board and plug the emulation 
cable into one of them. The remaining control and 
status signals are picked up directly at the CPU. 
However, Orion's In-place Emulation Modules eliminate 
the need for us to pick up signals at the EPROM socket. 


How would I hook up to my processor if it is a PGA (pin 
gris array) or PLCC package? 


One way would be to set up a bus header since the 
analyzer cable only needs to connect to a few signals, 
usually less than a dozen pins. The second way would be 
to use an adaptor which converts a PGA to a QUAD in-line 
package. These can be obtained from a company called 
Emulation Technology. For specifics, call Orion's 
Application Engineers. 


How does the MicroProcessor stop at a break point if it 
is simply emulating the ROM? 


The microprocessor is not actually stopped. Instead, 
the target processor is put into an "idle loop" during 
which a proprietary subroutine enables us to put the 
contents of the registers in the trace memory where the 
analyzer can pick them up. Once displayed, you have the 
capability of changing the contents of any register as 
well as patching any RAM or emulated ROM locations or 
change ports. 


What happens in the "idle loop" and how is it 
accomplished? 


The "idle loop" is accomplished by continuously feeding 
the processor a "jump minus two" instruction, which 
makes it continuously jump to itself. 
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How many break points can be set? 


The UniLab can set up to nine software breakpoints or 
use the analyzer's triggering logic to set a hardware 
breakpoint. In general, breakpoints are set "on demand" 
and in this sense an unlimited number of breakpoints can 
be set. 


AVAILABLE SUPPORT FOR THE UNILAB 


Q: 


A: 


What kind of technical help or assistance do I receive 
with the system? 


The UniLab comes with a detailed step-by-step tutorial, 
a handy reference card and an extensive reference manual 
providing answers to virtually any questions which might 
arise, In addition are existing on-line help 
facilities, menu displays and a complete on-line 
glossary of UniLab commands and features. 


Why doesn't Orion provide schematics with systems? 


Orion considers the schematics to be proprietary 
information and they are not available for customer 
access. Our technicians are fully trained in trouble 
shooting systems problems. Therefore, Orion feels that 
repairs should be done at the factory or under advise of 
our application engineers. 


Are memory or speed upgrades available for the UniLab at 
a later date? 


UniLab is both memory and speed upgradeable. When this 
service is needed please call a sales engineer to supply 
you with the details. 


Is the UniLab hardware field upgradeable? 


No. The UniLab needs to be returned to Orion's factory 
for all hardware upgrades. When the upgrade is complete 
Orion's technicians run it through a complete set of 
diagnostics and reinstate the 90 day hardware warranty. 
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General Functionality 


Is the UniLab a real time in-circuit emulator? 


Yes. The UniLab provides both a real time emulator as 
well as a true in-circuit emulation. 


Do you simply emulate the ROM? Are you just a ROM 
emulator? 


No. We plug the target processor into your target 
circuit with an emulation module. The ROM is emulated 
in the same fashion as other development systems and 
emulators, however due to Orion's innovative approach to 
interfacing with each target CPU, UniLab can work with 
almost any processor. 


What is the UniLab? 


The UniLab is a microprocessor analysis system which is 
actually four instruments in one. It combines a real 


_ time in-circuit emulator and an advanced 48-channel bus 


state analyzer together with a stimulus generator and a 
built-in EPROM programmer. All these functions are tied 
together in a small, compact unit which is designed to 
interface with an IBM PC via the RS232 High Speed data 
link. It is an extremely powerful and versatile tool 
for debugging microprocessor-—based designs. 


How does the UniLab work? 


The UniLab actually uses your microprocessor hardware 
itself to provide the emulation for the software. 
Rather than have the CPU inside the emulator, Orion's 
approach leaves the target CPU on the target board and 
the UniLab controls it externally. 


Is the UniLab a logic analyzer? 


No. UniLab is an in-circuit emulator combined with a 48 
channel bus state analyzer. 
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How is a bus state analyzer different from a logic 
analyzer? What is a bus state analyzer? 


A bus state analyzer is essentially an analyzer which 
has been optimized for capturing trace cycles of the 
bus. It will only run synchronously with the target's 
clock. 


Can you look at and change the target registers? 


Yes. Once you have stopped at a break point, the target 
microprocessor is put into an "idle loop" and all the 
register contents will be displayed. At this point you 
can change register contents. You can also examine and 
change the contents of target RAM or emulated ROM 
locations as well as I/O ports. 


How much emulation memory is available to the user? 


The UniLab comes in three memory sizes, 32K, 64K and 
128K, It is a common misconception that we use part of 
this emulation memory for running the UniLab software. 
Actually, our software is run from the host computer and 
the emulation memory is left strictly for the users 
program. If the target program is larger than the 
UniLab's emulation memory, you can divide the program 
into smaller sections or you can add memory to the 
UniLab. 


Can the processor be started up at a specific address? 


Yes. Once you have established debug control, the 
UniLab has a GO TO command which will allow the user to 
adjust the program counter (when at a breakpoint) thus 
modifying program flow. 


Does the UniLab support high level language debugging? 


The UniLab is an assembly language debugger. However, 
the UniLab can read symbol tables generated by the high 
level language compilers or assemblers. With certain 
compilers, the C Language Source Code can be 
interspersed in the UniLab's display of the assembly 
code. 
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Does the UniLab support symbolic debugging and can it 
read assembler generated symbol tables? 


Yes. The Unilab can read symbol tables generated by 
cross assemblers. It totally supports symbolic 
debugging on an assembly language level. 


Can we support bond-out technology? 


With our method of emulation, there is no need of bond- 
out technology. 


How deep is the trace buffer? 


Our 1K trace buffer enables the user to view 
approximately 170 bus cycles. 


How can you justify only 170 cycles? I would need at 
least a 2K buffer. 


The UniLab has extensive filtering capabilities as well 
as four-step sequential triggering. The end result is 
that we sort through the cycles that are not of interest 
showing you only the desired cycles. In fact, you'll 
probably find that the UniLab, by virtue of its high 
speed RAM truth tables has the most sensitive and 
powerful trigger on the market. 


Will the UniLab do timing analysis? 


No, not in the same way that a logic analyzer would. 
However, it does have a Program Performance Analyzer(t@) 
or PPA which will give you insight into the actual 
workings of your program by giving you both address 
domain and time domain analysis for histogram displays 
of program execution. In other words, it will show you 
where your program is spending all its time, and how 
much time it's spending on unknown sectors of the code. 


Does Orion support PLM or any other high level 
languages? 


As long as the compiler will generate an Intel hex file, 
the processor machine code can be downloaded to our 
emulation memory and debug can continue at the assembly 
language level. 
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Can you make program patches using mnemonics? 


'UniLab's software comes standard with the single line- 


by-line assembler which allows you to make immediate 
changes to your program by simply entering the address 
and the assembly language mnemonics. This is a great 
time saver. So, you would not have to exit the UniLab 
environment and look up the codes in order to enter a 
patch into your code. 


Can you split the Emulation ROM in the target system? 


Yes, in 2K increments. In other words, with 2K 
resolution 


Does the UniLab support 32 bit processors, i.e. the 
68020 or 8386 or TMS 32020, etc.? 


As it is currently set up, the UniLab is designed to 
support virtually any eight or 16 bit microprocessor. 
At the current time we do not intend to undertake any 
hardware design modifications which would allow us to 
work with 32 bit processors. However, I can put your 
name on the wish list in case we receive enough 
requests. 


Can the UniLab determine between a prefetch and an 
executed instruction? 


Yes. The disassembler will re-order the display of 
cycles in the trace buffer so that the memory cycles 
associated with a given instruction appear immediately 
after that instruction. It hides from view the display 
of program cycles that were never really executed. 


Do you download Intel hex code directly into the UnilLab? 
Yes, our software provides the communication protocol to 
download the hex file from the PC to UniLab's emulation 


memory. 


Can you do a memory map, part in target and part in 
memory? 


Yes, in 2K blocks. 
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TECHNICAL QUESTIONS & ANSWERS 
June 12, 1987 


Can we use a PC or AT as a target? 


Yes, the UniLab can work with a PC or AT as a target. 
However, it does entail some special considerations. 


Do you provide "real time" emulation and trace 
capabilities? 


Yes. UniLab does provide "real time" emulation and 
trace capabilities. In fact, one of the unique things 
about the UniLab is it does not actually require that 
the microprocessor be stopped in order to provide a 
trace. In essence, what this give you is a real time 
debugger as opposed to a static debugger. 


When you say 32K of emulation memory, what is that 
equivalent to? 


The 32K refers to how many thousand bytes of object code 
are in your program. It does not concern RAM, (i.e. 
data space) as RAM is left on your target and not put 
into UniLab's emulation memory. 


How can you look at a stack pointer? 


Whenever you are stopped at a breakpoint the contents of 
the registers, including the stack pointer, will be 
displayed. 


Can the UniLab read Motorola S records? 


No. The Unilab cannot read S records. However, almost 
any assembler or cross assembler that generates S 
records will also generate an Intel hex file. The 
UniLab can read both binary and hex files as well as 
reading the program directly from a PROM. Also, several 
utility packages on the market will convert S records to 
one of the above formats compatible with the UniLab, 
i.e. Avocet. 


On your price list you say expanded mode next to some 
processors. What does that mean? 


Expanded mode refers to a mode of CPU operation where 


any and all internal on-chip ROM has been disabled and 
only ROM external to the CPU is used. 
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TECHNICAL QUESTIONS & ANSWERS 
June 12, 1987 
Can you support the 80286 in protected mode? 
No. We do not support the protected mode on the 80286. 
What do I need to change from one processor to the next? 


With the UniLab, all it requires is a diskette and cable 
change. The cost is minimal compared with most other 
development systems. 


How do I down load my program into the UniLab? 


There are two ways. One is to simply load your program 
from a disc file. This will download along the RS232 
from the Host computer to the UniLab's emulation memory. 
The other way is to load your program directly from a 
PROM by placing it in the UniLab's programming socket. 


What sort of CPU do you have inside the UniLab? 
The UniLab utilizes a Z80 microprocessor. 
Can you emulate RAM? 


As long as the program flow goes to RAM, yes we can 
follow the program into RAM, and once we have 
established debug control, we can set breakpoints and 
Single step thru RAM. 

Note: RAM must be available on customer target (only 
ROM program map runs out of Emulation memory). 


How many microprocessors does the UniLab support? 


UniLab currently has ready support for over 150 
different types of microprocessors. 


Does the UniLab come with a cross assembler? Is the DDB 
a cross assembler? 


The UniLab does come with a single line-by-line 
assembler, we do not have cross assembler support. We 
have a list of third party vendors who provide the Cross 
Assembler support which runs on the PC. UniLab DDB 
software is a Dis - assembler — Debugger, not a cross 
assembler. 
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TECHNICAL QUESTIONS & ANSWERS 
June 12, 1987 


Q: Which cross assemblers or cross compilers is the UniLab 
compatible with? 


As: Virtually any cross assembler or cross compiler which 
will generate an Intel hex file or binary object file. 
So, it's compatible with virtually any cross assembler 
or cross compiler on the market. 


Q: What is the Program Performance Analyzer? 


A: The Program Performance Analyzer is an extremely useful 
feature that will actually show you where your program 
is spending its time, and how much time its spending 
there. The advantage to this is that you can actually 
get inside into the real workings of your program and 
then make modifications that will ultimately make the 
program run faster, more efficiently, use less memory, 
and ultimately give the end user of your product 
greater functionality. It does so by doing both time 
domain and address domain analysis which will give you 
real time histogram display of your program execution. 


If you have any further questions, contact our Applications 
Engineering Teaa! 
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THIS SHEET REPLACES CABLE WIRING INSTRUCTIONS OF THE INSTALLATION CHAPTER 


Connecting the UniLab to your Z80 target board with an 
In-Place (tm) Emulation Module 


Introduction 


The In-Place (tm) Emulation Module is the new way to connect 
the UniLab to your target board: you simply remove the 
wicroprocessor from your board and put the module in its place. 

Please read all instructions before attempting to install 
your new module, as incorrect procedures may cause damage to the 
Unibab. : 


Power Supply 


The module can even supply power to your target, if your 
board takes 5 Vdc power and draws less than 1 amp. 

Power is normally provided to the Z80 from the target system, 
but, the UniLab can also provide pewer to the Z80 and the target 
system by placing a jumper at the appropriate pins on the 3-pin 
jumper header on the emulation module. 


WARNING: If your target board requires more than 1 amp of power,or 
dees not take TTL voltage, then you will need a separate power 
suppiy. When you use your own power supply you must keep the +5¥ 
jumper disconnected-- otherwise damage to the UniLab may result. 


3-pin Jumper Header (see diagram on next page) 


The EMZ8U Emulation Module comes with a Jumper Header that is 
configured according to your target system set-up. Please read 
over the next section to be sure that the EMZ80 is hooked up 
cerrectly for you. 


Power Jumper (pins 1,2) 


When connected, the UniLab supplies power to the processor 
and target board. Disconnect if you are supplying power to 
the target board. 


Reset Pin (pin 3) 


The 480 Emulation Module generates the appropriate reset 
pulse to the processor. But, if you have peripheral chips 
requiring to be reset, the Z60 Emulation Module provides a 
Reset Pin where you can place a micro jumper and attach to 
the master reset of the target system. 
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The Three Step Connection Process: 


1) Remove microprocessor from board 


With the module connection, the UniLab still runs all the 
target code on your microprocessor. The module just moves your 
processor a centimeter or two away from the board, 


2) Plug module into microprocessor socket 


Put the module into the microprocessor socket on the target 
board. Double check that you have oriented the module correctly, 
so that pin one of the processor on the module lines up with pin 
one of the processor socket. 


3) Plug cables into Unilab sockets 


Plug the 50-pin connector labeled "Emulator" into the left 
socket on the UniLab, plug the "Analyzer" connector into the right. 
socket. Both connectors must be plugged in with the plastic "key" 
on the upper surface, and the red edge of the cable to the left. 


OT 
wags 


AA a ‘ 
We yy 


7 Pras aye ee ekg 
‘ eed Hy ti atin Vers pase ely 
ae oh GD Mtl SA ibe Pi hed 


i tbe % ahs i" aly 4s, ; yy aft’ 
Uden att Qeah Aetgt ree Ast a 


123 

2) ef] 
power jumper Nyiaet 
ae Pee ‘ SEPB SE SY) 


4 
“ 


‘ 
ry “At 


-EMZ80.01 PAGE 2 OF 2 


280 EMULATION MODULE SCHEMATIC 
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Ut HCT132 Schmitt Trigger NAND gate. 
U2 ALS32 OR gate. 
* Connected to logic IC's. 


Title: EMZ80 Schematic 
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EM8-EC ANALYZER CABLE CONFIGURATION 
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EMZ780 EMULATION MODULE HEADERS 
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emulator cable — | | analyzer cable 
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UA EMZ80 Headers 


Z80 MicroTarget™ 
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Consult the appendices of the Personality Pak documentation 
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~-~ ENGINEERING APPLICATION NUTES -~- 


REr Li PCOTARGET BYSTEM AND THE UNILOB IL 

The Undbab can be used dn applications that) reauire the usa of 
arid VC as the target system. ALL Unitlab features are available 
to the aser, dmcludirng breakpoints, sinogle-steppinyg, etc. 


HARDWARE CUNFIGURATION 


The primary censiderabion in such an application is that a 
edrenit must be ceamsteucted te Filter out refirresly cycles 
the dynamic RAM: otherwise one will u@tbo a trace. full of 
Cycles diustead of processor onperak doves 


due bo 
refresh 
y and debuuger ceombrol willl 


be impossible. This Filter cirenit can be Yule ono a standard LEM 
PC prebtebype card and-is illustrated on page @, Bus headers 


should also be imstalled on the proebetype card. so the necessary 
analyzer and emulator cable commeck dens Gan be made, as slew an 
paves “4 and &. . < 


The analyzer cable will also need to be modi Fied in order ta 
preperhy clock in the bus cycles, as shown on pape 3. The 
existing blue wires that need te be changed should be renaved 
cemoletely, and mew wire sheuld be inebal led. Refer Co AQowendix VD 
inthe Unilab reference manual fer mere information on custom 
cables. : | . 


HUOMING UP TU THE TARGET IDM pe 


Unee the filter clrenit is made ard the analyzer cable has 


been modified, beth cables can be hensloed up ote the card which can 
then be inserted in the Leh pe. Cable-te-card cormections are 
Bown om paves S and 6. : 


Whe analveer cable has commections uring to the 
conmecterm, the Filler elrenit (deneaked by “CHT! ), 
Cleck veneratoriand-orcecesaer. The NE line must be drput thivouwgh 
ah inverter Cor a spare NOND vabe on the filter circuit) befere 
beinu attached to the NMI Diner the adag. 


GE-pin edue 
and to thie PO 


Note Ghat the lower address and data lines en the enulater 
cable can be piched “p by vluguing the ROM emulatear plug into a 
vacant RU seckeb on your GCaroekt load. If you plan to emulate 
the! pe BLUS, that RUM can be replaced directly; however, before 
frviiig bo ewmnlate ib is rececmmended that the analveer be used tea 
frace the taruet activity. 


UDL-PC INTERFACE CIRCUIT ! . 
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62-pluedge ANALYZED connector signals 


_csomector Ping Slanal 

- 1 M7. 

- 2 MG vy 

- 3 M5 

- 4 M4 
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IBM-PC/UDL ROM CABLE CONNECTIONS 
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G2-pin edge MOM connector. sinals 
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AM7 1 MAE 
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I emulating). 17 AOE 

10 GNU - 
19 D7E 
20 DGE 
2\ DOE 
22 * D5E 
23 DIE 
24 DAE 
25 D2E 
2G DIE 
- 27 DIIE 
- , 28 DIOE 
- 29 DI2E 
- JO D9E 
- Jt DISE 
r 32 - DUE 
- 33 DI4E 
e 34 DI5E 
- 35 D7A 
- 3G D6A 
- 37 DOA 
- 36 D5A 
- 39 - DIA 
. 40 ~ DAA 
- A\ D2A 
- 4 42 DIA 
: AJ DI5A 
- 44 DI4A 
- A445 DSA 
- AG ~ DISA 
: 47 DOA 
- 40 “DI2A 
- 49 DIOA 
- 50 DITA 


GETTING 1 TRACE 


Lefore Gracinu the PC target propram, one must configure the 
Unilab software fer an IGM PC target as follows: 


5 
EMULE 
: Emulator Memory Enable blabuss 
Ho Mewery Enabled of 


PCUALCHE oft 
SEG ool 


EMCLR clears Unilab: emulation nanary, 


Allowing the analyzer to 
trace tlhe target 


mentary exec dean. 


PCPATCH enables the disassembler/debuuner te reenpnize the 
different cycle types. They are ldentified by the high 4 bits of 
the CONT column of the analyzer displays : 


FETCH. = 4 to SF CUNT 
READ , G2 toa EF CONT 
WROTE. Ca tea CF CONT 
UUTRPUYT Ma bo WE CONT 
INPUT Ed to EF CONT 


_5EU' disables the Unilab's seunented woede, causimu the trace tro 


show plivslcal memery lecatlons (as epposed to a GEGrof set 
address frearmak) 


When a startup command is issued the Unilab will 
fo the leabl PC and the first cycles will be traced. Whis should 
frelude the O08 reset address, FFFO@. the disassemble may 
eccashionally be out of eyneh at the beudrmming of the Grace, bul 
_ Should be Fine once the gunop is made to the main body of the BlUS 


program, which ds ab Et4 lee for this particular LEM PO clone in 
the examples that Follows, 


issue a reset 


resulting a 3 
(from tou of buffer) 


cyf CUNT ADR DAN , HONEA MISC 
O AF FEES ENGERQUFA = IN EXC, Fave: LYLTIULL Rdazered 
G AF E04 FC LLU LAVEETEL LET L108 
7 AF EQOS Fi CLI LULTELAL PLL dere 
0 AF ENG LOve HOV fL,@ LULLLTLT geavdere 
AF ERY EGNG (UT AY, AL LELLILLL 191eerce 
UC AF EQOA EGOS UUT 03, NL LILLE Piette 
} 2 18 @ outd TLUELUNE 1egeeutl 
Fo AF EQ Lnnuas MOV DX, 300 LELTLETL 1ettleie 


19 2 US 84 outd LLULLLAL OOQQOLL 


13 WF ROOF EEUU at HIMMAL EHLettto 


1h 4F EQID TECH INC AL LULLLLUE PULTE 
15 2 300 0d outd HIEELLEL Llea@aca 
17 AF ale Reva MUY DL, DU LLLILLUL Let teas 
IY AP EOI EE °° OUT DX, AIL SLAATEEL t11eLdta 
IN AF EQS Gere LUUN EOL TELLCLEL Ehraease 
1D 2 3U0 Of outd LILLHLAL 141deere 
LEAF EOL Eere LUUY E015 LULLLELE LLteeate 
cl AF &Ot5 kere LUU! EQL5 LLLLLEAL Tfoeata 
CA AE EQIS Bere LOU EOL LILELLEL Ul teaeie 
eo? AF EQNS Eee LUUP EOLS LELLELIL t4foeete 
cll AF EWLS Gere * LUUP ERE LLLLLLEL LL tewete 


"go Un ov *¥ (trace resume) Home (top) n IN (from step n) T (row n=-5 ) 


Im this meade all of the triggering capabilities of the UnilLab 
can be used. : 


If your display dees rest Appear carreclh, beucm af F the 
disassenml ler ben ueboa cycle by cycle display of what's happeniiig. 
This may help you. drs determining bad cormeations an any of the 
Unilab inputs: > aa 


DSH ole 
resetting 
(from tou of buffer) 
cyl CUNT AUR DAL TAIN Mise 

O AF PETG EN TEED ftterere 
AP TEFL O4 LEELA a@agaren 
AP TEP GO ULE LL ooeey 
AF ETFS OY LELLILEL eaaaaaua 
AF TETA FO TEEIETLL Lit leeee 
AF EFS CO LILITIEL eaeaaaee 
AF GO PC TU SEER 
AF EQS FA LELEEL HELLO LY. 
AP EWG DO WLLL 1atieage 
AF EQQ7 OO TELLILEL edeazaga 
AF EOOO EG TELE TLteatte 
HAF €Q09 9 LELELLE Lareeaee 
LOAF EMO EG TITELIAL TESeOtta 
Vo 2 MON OO LITTLE eaaaaeda 
E AP EQUD OF WEILL Logeeart 
FAP EMC RA CLITELAL 1ortiere 
10 2 GLUE vO LLLILLAL eeeraene 
TL AF E@QU UO LEELTALE LLerieee 
12 AF EOOE QS TELLTALE TU 
(J AP E@OF CE TETELAL Cheeta 
14 AP EQIO TE WEUALEAE LELLELE 


No Un or 4Y (trace resume) Hone (ton) n IN (ren step nl T (from n2-5 ) 


aN oO Se wa 


~ 
sS 


USING THE EMULATUR 


Te use the Unilab’s ewulal tory capabilities vou will Wave bi 
First ead try the PC's BIOS Rup. First, Gurn the pe ZF ang 


remove the UM. the Unilab’s Buiudaterm plug car then be inserted 
in this sochet.: : 


Next, read the RUM inte the Unilab as described in seckion 
oF chavuter 6 OF tlie reference warnutal. Remenbers te enagle tlre 
PIIper tmwenrary Sedmernk lak yen Wish to enulate. () disassembly 
Fave M@taey slreuald stray you the same cade that WAS executed when 
the aralyzer traced the PU activity in the alaave exanple: 


HHO ft bs 
fir ENMEDDOFY Hl EOQ4 FUAd 


EMW4 15 UM 


kee, TL UL 

EW orn CLL 
EYOG Lage NUV AL, @ 
Cad EGne CUT 112, ft 
LW EGS UUT 04, IL 
EMU Nua NUV DX, 3nu 


EWaF EE VUE DX, AL 
LOY FEUa INC 1 


WWle f29 MOY UL, 1a 
LOl4 €E OUT DX, Me 
[WIG EOrE LUUP EQL5 
EQI7 E2FE kyu EVI? 
EWI ayy KUV AL, 99 
UMD EGGS UE 63, AL 
EWI) OLLO NUY AX, tS 


Issuinug a Startuy Bliautd-resule) iy the sane trace That was | 
SbbCaLmed wher, the analveer gid a trace. Irn Bnmulat Linny mode, any of 


the Privuering Capabilities are Available, and emulation HEWN y 
Can be altered. 


USING THE DELUGBGER 


Te gain Jebuu control cay am O400 based target Systen, the USer, 
Prouran wusk instal the required Poirter at locations UA} 
OMA as Yescribed in the BAGH / HAVE tarnyeb mates, There are alsa 
Cptional pointers that wust be Installed for the NMI and Sing le-- 
Sten features. Te deo this ene Must Fine an unused Dork ion of 
emda deny Mery Com create a “uti? MEMOrY Sseoment) ter insert 
the 'cede, Iv hr PC-clone there was enough space to da this aust 
before bli reset vector, Starting at FFED fence 


HC) 15 0M 

FICO CiebOGRORare KUV LG), Feed 
TP OS C7OGRUCMIEF NUY (0), FFU 
FEDS C7RCNMEROFY NUV LN), Faed 
ITUF C7O62CQCUIFF MOY UC), Frat 
IFES C7OGGECMROE® HUY (E),Feee - 
ThED EN@IEOMA® Mp EQUA, FRO: 
HY CUMGOAQCLITF MOY (4), FFD 
MiG ENCUFF@OFe Mn FEC, Fees 


So now when a STARTUP is issued the trace will appear as: 
Fol Lewes s . 


STARTUP 
resetting 
(from ton of bulfer) 


me CONT Ava BAIN HOAIN MISE 
AF FFFO C2RQGO40QDIFE MUV C4) +FFDL LLLLEEEE LAdorege 
; CY \ Ml write interrupt Mi LITTLLLT 1at1aeel 
0 Cv STF write tnterruvt af AULD PELE 
Oh AF rire ENUDET OO 8 = INP TFC, edd: TITLELLL evovdega 
E AF FEC C7QGOGRVERTY HUY (6), ree LULEEUAL Geeerit 
19 C8 GW write interrupt. 7 JULIE dd2d0aRa 
16 C8 7 FO write Interruot #1 LALUIUEL LLLLeede | 
14 AF IDS U7QGQULODIFE HUY (0), Fra PLULEATD dieeares 
I) 0 Di write tnterrunt 12 TLELLTAL PAeeeeL 
IE CO OTF write interrupt he PEUQQQAL QELELENL 
IU APF EFOY COMGONeRere MUV UJ , Feed TLECULGE POaeudt 
CO Cd Od write interrupt le JILELEL @aagoaee 
eb WN UFO wtte interrunt We PUULEALT Cie teeaa 
e4 AF PEDF C?QGOLOQRIFF HUY LLY FFGL PYUVGLEL 21000Lt1 
el) C8 C UL write Interrupt 13 LITLELEL Let feeet 
cE OG DEF wite interrupt a3. me COCOCRUCRTEELEDD| 
cl AF FEES C7@G0E@MOOES NUV LE) F000 TULL LLiALaLea 
JJ COE G8 write Interrunt I TILILELL Revved 
JG CO F FO trite interryne WJ ALUIOLEL ELE feed 
34 AF TED ENV4ER@UFe —gMp EOQ4, FOOds TPULLEEL 120d 
AC AF E8@4 re CLD TELLLEEL PEU1e9 


Ny Un or “Y¥ (trace resume) ome (top) n IN (from step nl 1 from n=-5 } 


New one carn vain debug control as Follows s 


REGED EQID RD resetting 


W=EGID Fe Fe02t---oditsz- ~a-p-o) AX=6NY9 [X=0R24 CX=ede0 Dx 30 
COTW) DS=OUUd SS=MeOd EYS=C0dd SP=QU4 DNZEFF2 DISLSCU S1=E054 
LYIU £663 UUT 63, ML . (next step) ok 


ce 


At the abeve Lbirewale 
register contents and 
executed. Mobe that 
the MU whit rebook 


The Unibab cenmaned oN? 
thirsuul the Progra: coca, 
branches: 


r : 
IM-EOI) F=f We (-~-oditsz-a-p-c) 
CS-P OO) DS=Redd SS=Auad ES- e020 
LOU ULLO NUV 1X, CS 


Orie 
WAiGChroat 


Care 


EVA NY 

IPFEQ44 Frade (---editsz-a-p-e) 
CO-POO) UUEF ORS SS=OAId EG=F eae 
LO4 EEFE LUUI EQ44 


NUL 

IP=EQ44 FF 102(---odilsz-a-p-c) 
UG-F Od USF RRO SE=WIIO EG=read 
LWih Gee LUUM E044 


N 
ID=E04G F=1 082 (---od ll sz-a-p-e) 
US=1 OWd US-F00d S8=e220 ESsr oY 
L4G 3a XUR AL, AL 
ENG ny 
IMEQSO F =P 046 (---oditsZ-a-P-e} 
Ciel M00 US=F O88 BS=905d ESererg 
LW50 EDGE JM Eege 


BHI | 
IP=EOG8 F=T14G(---olli Tst-a-H-c) 
Ciel ded DS=F0W8 SS=WA90 EL=roWe 
LVGO Wvsi4 NUY NIL, 54 


One can unichly 
BTARTUP and ther 
~ example below, 
Unita software has been 
Catmare shows the target 


will 
and “NMI? will allow the weer Gc Pol law 


Jip ahead in the Proadeam ane 
resettity the system as Follows 


point von can see a display of all baruel 
a disassembly of the 
When a brealpoimt is ebbained dvs this 
since a Garget reset command was issued 


merck’ Lisbruct bom bes bee 


Meariiers 


Allow the user to single-step 


AX=GNII DX=0OZ4 CX=vded bX=OIDg 
BI=0054 Werte? DL=LSCU S1-E054 
(next step) ok 


Bet aroklrear brealktpodrk - 


NX=1103 BX=@d24 CX=7000 DX=0300 
SP=QIFE DPSFFF2 DL=L5CU SLE O54 
(next sten) ok 


AK=11@3 DX=C02% CX=7CEF DX=03L0 
SP=QITE WW=EEFE DIFLSCD SL=EQ54 
(next step) okt 


AX=1184 UX=@024 CX=<dNad DX=O300 
SP=OSFE LW=FFF2 DIZiSCD SI=ER54 
(next step) ok 


AX=O8I0 BX=QU70 CX=RROd DX=03E0 
SP=QJFE UP=Q3EG UIEQ4EG GSI=EOGY 
(next step) ok 


AX=Q000 PX=QU70 UX=dWWd WX=O3LY 
SP=QSFE L=O3CG VI=OIER SI=ERCG 
(next step) ok 


uet by the initdalization routine by dein a 
a NOW? command after Che PC has rebooted. 
the PC has been rebooted by the Unilab, ancl ther. 

leaded inte 
PO in ar 


In the 
Che: target pot 4y NOW? 


infinite loop that is Lol dvig 


at othe CUML serial L/U pert (SFR hen 


Porm a Uniblab connect ian 
that is mot there: 


NOW? ; 
cyl CUNT AUR DATA HUAI MISL 
“(M4 AQ PSUS FI Si) LLLEREEL PELLET OL 
“fd 40 FSG BEC AVY BE, Ge PVLLGATL ELIOLIOO- 
~ML 48 F500 FECROL TEST fil, 4 LEELALEL PE@rte 
“0 ER SPD OO nye, ; HILLEL 1OLtet9 
~I AM FSU4 DAEDAS " NUV DX, 3FD LALLA RVeReett 
"WE A8 TSOT EL IN OL, DX HILLALEL 1UNN@110 
-J5 EQ 368 Eng LLULTLLL PLLOt tee 
~h AQ T5UO (GLOVE TEST fil, t WLALLELL 1OLLIO18 
“OF 48 F504 WINES NUY DX, 3FU LLLLTLEL @o@eaatt 
-UC 49 F507 EC IN AL, DX PULLAETL PLELOLID 
ON EO ITD G@ inp PELLET Late 
-UU AY F500 POCVal TEST AL, t FTLLEELE SOLLEIO 
-04 AW F504 LAT DAS HUY YX, AED LLEUELEL Q@aQeL LE 
-UL 49 FSU? EC "IN fil, DX LULEELAD Gisderte 
-7F EO SED GE tng LICLUEEL PEUL Lee 
“Hd 49 F500 1600 TEST NL, J SETHE 2OL1LO12 
7} WW ESUA WINDS HUY DX, 3FD LLELLLLL @aoaeet 
-7h 4 FSUT EL IN fl, DX HULLUEEL FLttOntd 
“Th €O HUG Ino LEEUTELL LL tad tee 
-75 48 F500 TOL8Ol TEST fil, | WVLATINE Settera 
“OE 48 F504 BAPIYS HUY DX, SED IHTHILLL e@aaaart 


Ho Dy or *¥ (brace resume) Home (ton) n IN (from step nl T-Ufrem ns-5 ) ok 


Unce a starting point is established for an area of interest, 
the powerful teiguering capabilities of the Unilab can be 
MbLlizced Go allew the user te look specifleally ab what le is 
inGerested firm. In this way the user can move Ghaeeuwuh bis precoram 
and observe his vragranw Flow as the PC OMB0 execubes ib. 


Paul Larna, Applications Enuineering 


~\\- 


INJ21 + 85-4 


INSTRUCTIONS FOR 4617, 4617-1, 4617-3 IBM AT 


yoga 


& 

Lf VO CHANNEL, 

"9 BOAND bDEscHiptign i. SGRMMECNONE 
14617 Plugboads for the IUM AT Computer tava est’ x op" 

Se 2 pattern for Unirestrictad COMponeHt placenientt, Power ond ground i POOR TANEL 
a" 4 tutround the old potion on both the cColMpobent ond soldar sidg 

thea board, Tho power ane tround buses are conmnocted to + BV ond (_) 
ground pins of the cuge connectors. 


tear board adga. 


A layout sheet ts Provided to ald In 1.¢, sud componart plocomont,. 


A unlvertol brackat ts Ptovided for four slzes of 1/0 


connectors or to 
tecure the board Into the computer chossls, 
¢ 


2.0 CONNECTON Location AND NUMUENING 


fom motherboord connector focatlous ore shown In (ly. 2-1, 
Motherboord plo numbers and signal names ate shown In tg. 2-2, 


t 


VOPIn Signal Name 10 Pin Signal Name 
Nt 
At “1/0 ChICI GND 
A2 $07 RESET ORV 
AJ SD6 
‘Aa SD5 
AS $04 
AG $D3 
N7 Sb2 
AS SDI 
! ANY sbo 
A10 1/0 CHIRDY 
Alt AEN 
AL2 i SAL9 
“Ny SAIB Slgnal Name 
“4 SA17 ; 
ibs SAIG MEM CS16 
ef 


SAI5 
SAI4 
SA13 


“1/0 C516 — 
IRQIO 
MQH 


SAL2 Refrest aie 
ee S “Refresh IRQIS 
a" SAL] CLIK IRL 

vel SALO ; IRQ7 * DACKO 
N22 SAQ ORO 
\23 SAB -DACKS 
\24 SA? DRQS5 
\25 SAG -DACK6 
\26 SA5 DRAG 
\27 ‘ SA4 -DACK7  , 
\29 Pe TSag DRQ?7 
\29 mT SA2 +5 Vde 
\30 he SAL -MASTER 
\31 ' SAO 


GNO 


FIGUNE, 
2-2 


Noo 7 Py — ep 
a 25 Ply —— 


Lowrst 
FIGURE ate ~-!15 Pine} Connector 
3-4 Screw Hole 
4-9 Pine 


"0 UNIVENSAL BRACKET 


A unlversal brocket Is provided for mounting one of 4 1/0 con- 
celors; It cen also be Usad to secure the boord without sa 1/0 con- 
ctor, See fly. 3-1. The O-subntutature O-ply AMP no. 745] 12-2: 15- 
it AMP no, 745113-2:; 25-pluy AMP no. 745} 14-2: of 37-pin AMP no. 
(5116-2 of equbvalent connector miny be used If thelr dlmenslons 
‘ately fly. 3-2 to Wt the bracket ond computer, 


vate 
SOUT tei el 
HAN Aree 


Cross Bars 


vy 
From Edae of a 
Brace To Centertina 
ema? 8 registered trademark of liternational Business Machines ’ 28 
VECTON ELECTRONIC COMPANY, 12469 Gladstone Avenue, Sylmar, CA., 91342, phone (818) 365-966] 


: a 
\ Lg < a « 


Appendix B: 
Sources of Cross Assemblers and C Compilers 


The UniLab software is designed to work with any assembler 
or compiler. The only thing the UniLab needs is the object code 
in either binary format or INTEL hex format. 


Even this hurdle can be overcome with one of the various 
conversion programs on the market. For example, Avocet has a 
. product which converts Motorola S-records into binary format. 
' See the Vendor listing for Avocet below. 


As a service to our users we have compiled the following 
list of inexpensive cross assemblers and compilers. The two 
character appreviations indicate the sources listed on the 
following pages. We would appreciate any user feedback so that we 
can keep this list current. 


ASSEMBLER COMPILER 
PROCESSOR SUPPLIERS SUPPLIERS 
1802/5 25 AV MI WE AA EN RE SD UW 
6301 25 AV CY EN LO RE UW . IT AR 
. 6305 AV MT RE 
6502 25 AV LO MI EN RE SD : : MX 
6800/2/8 25 AA AV MI DM EN LO QU RE SD UW 
6801/3 25 AA AV DM EN LO MI RE SD UW ' AR IT 
6805 25 AV DM EN LO MI RE SD Uw IT 
6809 25 AV DM EN LO MI RE SD UW rt 
68000 25 AV EN LO QU RE SD UN UW MX IT MT LA UW 
68HC11 AV CY LO RE SD UW AR IT 
NSC800 25 EN RE MT 
8048-50/41 25 AA AV CY LO MI RE SD UN 
8051/31 25 AA AV CY LO MI RE SD UN US UW AR MC 
8080 EN LO UN | 
8085 25 AA AV CY EN LO MI RE SD UW MT 
8086/8 25 AV CY EN SD SP SW UN UW MX MS MT LA 
8096 25 AA AV CY LO. UN 
z-8 25 AV AA CY EN LO RE SD UW 
Z-80 64180 25 AV AA EN LO MT RE SD US UW MX KY LA, AR 
Z-8000 25 EN RE UN 


Vendor List begins on next page. 
7500 AO software (303) 364-S00/ or [-S0O-BUS-BIYY 
Avocet Syptems (302) 134-0151 or «OO - WU~ 8600 
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IT Introl, (414) 276-2937. 


C cross compiler for 6801, 6301, 6805, 6809, 68HC11, 
68000, 68020. $1950. 


KY’ KYSO, (503) 389-3452. 
C cross compiler for 280. 


LA Lattice, (312) 858-7950. . 
C cross compiler for 68000, 8088, 280. $500. 


LO Logical Systems 
6184 Teall Station 
Syracuse, NY 13217 (315) 457-9416 
Cross-assemblers for a variety of processors. 


MC MicroComputer Control, (609) 466-1751. 
C cross compiler for 8051. $1495. 


MI Midwest Micro-DelTek, Inc. 
5930 Brooklyn Blvd. 
Brooklyn Center, MN 55429, (612) 560-6530. 


Limited macros, cross reference, conditionals, 1K of 
object/minute. $300, 


MS MicroSoft 
10700 Northup Way 
Bellevue, WA 98004. C compiler for 8086, 8088. $495. 
As of release 4.0 of their software, MicroSoft does not make 
ROMable code directly. You can purchase utilities which are 


supposed to make the output of the MicroSoft compiler into 
ROMable code. 


NOTE: 

Microtec Research is not the same as "Microtek." The 
MicroTek symbol table format refered to in the SYMTYPE menu is 
compatible with the "MicroTek/New Micro" products. 


MT | Microtec Research 
Box 60337 
Santa Clara, CA 94088, (408) 733-2919. 
C cross compiler for 68000, 68008, 68010, 68020. $1750. 


C cross compiler for 8085, 280, 64180, 8088, 8086, 
80188. $1550. : 


NM MicroTek/New Micro 


Supports a wide variety of processors. Call for latest 
product availability. (213) 538-5369. 
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UW UniWare . 
‘Software Development Systems 
3110 Woodcreek Dr. 
Downers Grove, IL 60515, (312) 971-8170. 
8 and 16-bit cross-assemblers, $295. 
C cross-compiler for 68000, $595. 


WE Westico 
25 Vanzant St. 
Norwalk, CT 06885, (203) 853-6880. $225 Macro, $225 Linker.. 


WW Western Wares 
Box Cy, 
Norwood, CO 81423, (303) 327-4898. $395. 


All of the Intel Series III MDS software can be run on the 
IBM PC with the UDI package from Real-Time Computer Science 
Corp., P.O. Box 3000-886, Camarillo, CA 93011, (805) 482-0333 
($500), or the ACCESS package from Genesis Microsystems, 196 
Castro St., Mountain View, CA 94041, (415) 964-9001. 
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eed 


9: Orion 

‘weperoin GOGE'T' 

Re: UniLab 3.31 Files 
Date 24 lay U7 | 


A number of people have asked for an explanation of the files 
that are on the UniLab disk. Mere is a directory of the 
UniLab Sales Demo: 


COMMAND COM 23210 3-07-85 1:43p 
AUTOEXEC: BAT 123 5-23-86 4 :43p 
CONFIG $yYS 128 5-06-86 8:03a 
INSTALL BA‘ 2176 4-09-86 11:28a 
EDIV33 VIR 8533 5-19-87 8:56a 
UTIL33 .VIR 4450 5-19-87 ° 8:57a 
L1B331 VIR 8578 5-22-87 10:46a 
L2B331 VIR 8873 5-22-87 10:46a 
MEN331 VIR 6683 - 5-22-87 10:47a 
UL331 VIR 3276. S.20287 10247a 
OLASM331 VIR 6467 5-22-87 10:48a 
ULZ80 EXE 46176 5-24-87 3:05p 
~~ ULZ80 OPR 2962 5-24-87 3:05p 
~~  JLZ80 MCR 14602 5-22-87 2:46p 
‘weNNT331 0 «OVE 39744 5-22-87 10:48a 
UNI331 —OPR 1130 5-22-87 10:49a 
-UNI331— HCR 8633 5-22-87 10:48a 
UNILAB SCR 41984 5-22-87 10:58a 
280 BL 5155 3-16-87 9:09a 
DEMO2 BIN 384 2-18-84 12:19a 
DEMO3 BIN 2048 2-17-84 11:08a 
' DEMO4 BIN 676 3-12-86 11:56a 
DEMO SYM 128 3-06-86 8:29a ay 
DEMO4 SYi 684 3-12-86 2:03p ao 
aN 
DEMO4 ss 2699 3-11-86 10:56a < 
TESTZ80 BIW 45 9-26-86 11:13a 
DEMOZ80 = TRC 1024 9-26-86 11:01a 
DO BAL 40 3-30-87 4:07p 
FORMAT = COrl 9398 3-07-85 1:43p 
DIRSIZE BXE 6972 9-15-86 9:02a 
30 File(s) 49152 bytes free 


OS. 


There are 30 files here on a double-density double-sided 
diskette. Note that there are only 49,251 bytes free. This 
is not enough room to also put the PPA files on. If PPA 
demos are yiven, you will either need to take some of these 
files of Ff this disk to make room, or demo it on a hard disk 
(preferred, anyway). ( With the OptiLab being dropped, there 
will have to be some adjustments in the PPA demo. ) 


Some of these files are reyuired, some are optional. ‘The 
UniLab system requires the next three files to be on every 
disk when the system boots up: 


COMMAND. COU . 
This is DOS's file, required to boot up any diskette. We do 
not deliver this with UniLab diskettes for customers, since 
we haven't licensed it From IBM or Microsoft. It is put on 
the sales disk for convenience only, and should not be 
distributed outside of .Orion. 


Lenhart 
This file sets up the two "environment strinys" with the DOS 
SET Sennen This is absolutely essential for the UniLab Aste) 


operate. This tells the UniLab system where to look for its 
own files and the glossary. 


The user can type these two SEY commands even after the 
system boots up to establish these environments. DOS 
executes the commands in any file named AUTOEXEC.BAY when it 
first boots up. If you have other things that are 
initialized by an AUTOEXEC.BAT file (clock, calender, etc.), 
then the two lines in this AUTOERXEC.BAY file should be added 
to your own AUTOEXEC.BAT file. You can see the environment 
setting commands in this file by typing TYPE AUTOEXEC.BAT. 


Note that these environments are entirely separate from the 
DOS PATIL command. You can still have a PATH set up which 
does not need these environment strings, but UniLab must have 
these estalolished before it is called. 


These "environments" are a feature of UniLab. ‘The user can: 
be.in his own directory doing cross-assembly or whatever, and 
type something like: 

/UNI/ULZ80 
to invoke the UniLab. The current directory will not change, 
and when the DOS DIR comuand is executed from UniLab, the 
files in the current directory will be shown. This also 
allows the user to keep multiple DDB's in separate 
directories while sharing a conmon glossary. 


he following files are not essential to running UniLab: 


MEMNO2Z.BIN - Sales demo with bug. 
DEHO3.BIN - Sales demo with buy fixed. 
DENO4.BIN - Binary object code produced by DEMO4.C. 


DEMO.SYM - Symbols for sales DEMO2,3.BIN. 
DEMO4.SYM - Symbols and map file for DEMO4.BIN 


DEMO4.C - igh level source for DEMO4.BIN 


TESTZ80.BIN - LTARG in a binary file. Use 0 7FF BINLOAD. 
‘DEMOZBO.TRC - Trace of LTARG. Use ‘SHOW. 


DO.BAT - Naster clone command. Will make a copy of 
this diskette. 

FORNAT.COM - DOS command to format a diskette. 

DIRSIZE.EXE - his checks the number of files on the 
diskette, and is called by the DO.BAT file to make 
sure that the copy was done correctly. 


press: 


press: 
press: 
press: 


type: 


press: 


type: 


types 
press; 


type: 


type; 


type: 


type; 


repeat: 


OPTI / UNILAB DEMO SRQUENCE 


Starting from command mode: 


F10 


RESET 88 RB 


N 
LR 


LP 


Shows you main menu. Explain that the menus 
are learning tools, show them the various 
options within the main menu. Then explain 
that we will demonstrate in the command mode. 


Here we are in command mode. 
The screen splits. 
The cursor jumps to upper window. 


BINLOAD DEMO 3. BIN 
The binary file is loaded into emulation ROM. 


STARTUP is executed. Trace fills upper 1/2 
of the screen. Bring their attention to the 
flashing LEDs on the target. 


The target stops. 
RESET state, 


The processor is held in 


Disassembly appears in upper right window. 
Cursor jumps to lower window 
New trace appears. 


out to port 79, 
execute, 


We see the value O1 going 
Program continues to 


Program is stopped just before value Ol goes 
out to port, 


The program single-steps. 


Program is released, runs until just after 80 
goes out ot port 79, 


Notice LED stepping along. This is it 

for a basic demo. We can continue from here, 
and show some visually attractive features. 
See next page for remainder of demo. 


type: 


40 MODIFY 


OPTI /UNI DEMO CONTINUED 


The bottom 1/2 of screen is wiped clean, 
then a dump of memory appears. 


type: <hexadecimal numbers> Notice the memory locations are 


press: 


CTRL +> 


altered. 


At the same time. 
ASCII display area. 


Now the cursor is in the 


type: <an ASCII string> The memory locations are altered - 


press: 


type: 


press? 


press; 


RSC 


90 MODIFY 


END 
F9 


80 DN 


90 ASM 


prompt 
JP 88 
F9 

F10 
F8 


F5 


any key 


F10 


display changes in both HEX display and 
ASCII display area. 


So that your changes are not saved. 


Because now we are actually going to change 
the machine code. 

alter the two locations, so that 
they now contain OO & 18. 


91 & 92, 


Your changes are saved. 


The program starts up. Behaves very 
different now. 


Provides a disassembly showing what you 
changed. 


Invokes the line by line assembler at 
address 90, 

Press a second carriage return to get 
out of assembler, 

Starts the program up. 

Complete demo with the menu systen, 
Gets ToolKit submenu. 

Gets ASC command. Note equivalent command. 


to continue —- return to the Toolkit menu. 


Now you are back in main menu. 


ABOUT DENO3.BIN 


This assembly language program lights up each LED on the 
target board in sequence. These LEDs are connected to port 79. 
(Sequence is 1, 80, 40, 20, 10, 8, 4, 2, 1, etc.) 


You can alter one instruction so that the program now lights 
up only the two LEDs at each end, first one then the other. 
(Sequence is 1, 80, 1, 80, etc.) 


Program sections 


; The first section of the program initializes some registers and 
; then loads a section of program memory into RAM. 


0000 31FETE LD SP,18FE 
0003 bb213412 LD IxX,1234 
0007 Fb217856 LD IY,5678 
000B 210019 LD HL,1900 


Initialize Stack Pointer 
Init IX to randomn value 
Init IY to randomn value 
These six instructions siinply 


=e se OA Ne wD TSA NSH TSH 


DOOE 3600 LD (HL) ,O demonstrate how the bus 

0010 34 INC (HL) state analyzer captures write 
0011 34 INC (HL) and read information from the 
QO012 14 INC D bus. 

VU13 14 INC D 


; Now set up registers for the move of a block of memory from 
; ROM to RAM. We will move twenty bytes from ROM starting at 
; address 100 up to RAM starting at address 1800. 

0014 210001 LD HiL,100 pointer to source 

0017 012000 LD BC,20 # of bytes to move 

001A 110018 LD bDE,1800 pointer to destination 

001D EDBO LDIR perforin the tnove 


=e =e SS NO 


; The next three instructions are, as far as I can tell, 
; pointless 

QO1IF 21FFF LD HL, FEFF 

0022 313 LD A,18 

0024 77 LD (HL),A 


; This is the jump up to the output routine and main loop. We 


; jump around the reserved and overlay areas. 
0025 738000 © JP 80 
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+ Up nere at address 80 we first (pointlessly) load a value into 
; register Db. 
0080 16FF LD D,FF 


; Then we load a value into A which is put out to port 7b. 
; This is the control register for the port chip. 

0082 31880 LD A,80 

0084 D37B OUT (7B),A 


; Next we put a one into register A. 
0086 301 LD A,1 


; Now, put the value in register A out to port 79. ‘The LED on 
; the end lights up. During normal operation of the program, 
; this instruction will be jumped to after each call to the 

; delay loop (the program calls AO, then jumps to 88 after the 
; return from the routine at AO). 

0088 b379 OUT (79),A 


; Next, rotate the value in register A. Since only one bit in 
; the register is turned on, this will cause the bit to chase 

* around the LEDs in a boring sequence. For fun, you can seta 
; breakpoint at this place, put a different value into A 

+ (say, 7), and then let that get rotated around. ‘The command 
+ Sequence to do this is: RESET 88 RB 

; ; 7F0O1 =AF 

’ RZ 

OO8A OF RRCA . 


; ‘the next two instructions are pointless. 
OO8B 14 INC bD 
O0O08C UD NOP 


Next we call up to the subroutine that causes a delay between 
writes to the port. Without this delay, all of the LEDs would 
appear to be continually, faintly lit. When the program 
returns From the delay subroutine, we jump. back to the output 
instruction at address 88. 

You can alter that jump instruction, and instead jump up to 
address 1800. At 1800 is the code that was moved from ROM to 
RAH by the LDIR instruction at address 1D. If you make the 
Chanye (JP 1800 instead of JP 88), then the LEDs will flash 

7 in a distinctively different pattern. 

008D CbLAVOO CALL AO 

0090 C38800 JP 88 


eo ™=Oe@ we BMS TWO BO We WE NAS WE 
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es Oe ue TO We WH WH WE 


This is the delay loop at address AO. First it loads the 
delay value into the HL register, then goes through an inner 
loop that decrements the L register. Once the L register 

is down to zero, the If register is decremented once and then 
the program jumps back to the inner loop, decrementing the L 
register 100 (hex) times. Eventually the H register counts 
down to zero, and the program falls down to the RET (return) 


instruction. 


OUAOQ 2140 LD HL, 40FF The delay value. 


, 
OUA3 2D DEC L > Decrement L. 
OOA4 20D JR NZ,A3 ; Jump back if L is not yet zero. 
OOA6 25 DEC H ; Decrement H. 
OOA7 2U0KFA JR NZ,A3 ; Jump back if H not yet zero. 
> Return to the place called from. 


OOAY CY RET 


LDIR at address 1D. 


the delay loop at AO (previous page) and then jumps to the 
output command at address 88. 

This code will never be executed unless you alter the code 
at address 90, so that it jumps to 1800 rather than to 88. 
If you make that change, the code here will put 01 out to 
port 79, then the code at address 88 will put an 80 out to 


me Tse TO NE WE We WE We WE We WE 


1800 16FE LD D,FF 
1802 3880 LD A, 80 
1804 D37B OUT (7B),A 
1806 3801 LD A,1 
1808 D379 ouT (79),A 
180A OL RRCA 
180B 14 INC D 
180C V0 NOP 


180D CbA0O0ON CALL AQ 
1810 C38800 JP 88 
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‘whis is the code up at address 1800. It gets put here by the 


This code puts the value one out to port 79, then rotates the 
one in register A (so it is now an 80). After that, it calls 


1987 


so, the normal flow of the program is: 


ADDRIrSi3 DESCRIPTION 
REGISTER INITIALIZATION 
0-13 Initialize registers, demonstrate the increment of 


a RAM location. 


BLOCK MOVE FROM ROM TO RAM 


14-11 Prepare registers for the block move instruction 
(LDIR), and then perform it. 


JUMP TO THE MAIN LOOP 
1F-24 Unnecessary processing. 
25-28 Junp up to the port initializaion/main loop. 


PORT INITIALIZATION 
80-85 ' Initialize the port chip. 
86-87 Initialize the A register. 


MAIN LOOP: OUTPUT TO PORT 79 


88-89 Put the value in the A register out to port 79. 

BA Rotate right (circular) the value in the A 
register. 

8B-8C Unnecessary processing. 

8bD-8Sl Call the delay routine at AQ. 

DELAY LOOP SUB-ROUTINE 

AU-AY8 Load 40FF into the HL register, and then decrement 
that register down to zero. 

AQ Return to the address right after the one this 


subroutine was called from. 


WAIN LOOP: JUMP BACK TO OUTPUT COMMAND 

90-92 The delay routine at AO returns to address 90. 
The instruction at address 90 jumps to the output 
command at address 88. 
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UDL Demo 
The demo board is small 280 controller. It consists of a 280 u-p 
together with 2K of RAM, 2K of ROM power supply regulation and a 
PPI device. The system is used to demonstrate the Operation of 
the UDL when used with the demo2.bin program that has been 
written for it. The small board is also used to demonstrate the 
ease with the UDL is inter-connected to a target system. The demo 
board also serves as a very adequate z80 development system and 
can be sold for $99.00, 


The demo program can be loaded in the emulated ROM of the target 
system from the system ROM chip as provided or from the binary 
object file called demo2.bin. The system 2K RAM is located in 
the address range 1800 to 1FFF, while the system ROM is located 
at address range 0 to 7FF, 


The demo2 program is loaded and the analyser is used to trace the 
first cycles. This is usually done from the menu mode and the 
first cycles are shown without the augmentation of the symbols 
Which are availiable after of the loading of the symbol tables. 
The first few program steps are then explained and gone through 
as a vehicle to show the layout of the trace display. The 
beginning of the block move section of the Programs structure is 
pointed up and the second page of the trace display is shown by 
pressing the number 1 (as shown on screen). The highly boring 
nature of this display is noted and the subject of trace depth 
and filtering functions is bought up. A brief review of the 
command vs menu operation provides the lead to "esc","esc" and 
access the "command mode". On the way to the command mode the 
"HELP" screen is encountered and explained. Once in command mode 
pressing F9 provides a reset and the re-display of the trace as 
shown previously, the difference is now you are in command mode 
and have a command cursor at the bottom of the screen. Pressing 
F5 takes you to the second page exactly as you had it before, 
The topic of filtering is explored and demonstrated by typing 
"ONLY WRITE S", The system resets and refills the trace buffer 
Only with the write cycles. The benefits of this capability is 
explored and you proceed on by returning to the initial display. 
‘Ask for questions etc, etc, 


Now the time to point out the fact that the program has crashed, 
A brief discussion of the structure of the Program and that since 
it has crashed the possibility that it has gone outside the 
expected program range may exist. You now ask the UDL to trigger 
On the crash condition by typing "NORMB FETCH NOT 0 TO 100 ADR Ss" 
explain the structure of the command and the triggering features 
and relate those features to the associated benefits. Then you 
press "return" The system will reset as well as start to run as 
evidenced by the LEDS. Point out the display on screen as well 
not triggered light on the UDL. Make a point to show the 
extinguishing of the trigger light on the UDL as the target 
System crashes and the screen displays the events leading up to 
the event, Note the RET and the 17FF address, A brief word 
- about the fact that RAM is between 1800 and 1FFF is in order. 

A quick story about catching this type of event and the 


babysitting capability can be inserted here. The reset and 
repeat operation can now be demonstrated, by typing 7 SR. 

After the system has repeated the same trace showing that the 
"crash condition" is the same each time we can now try to uncover 
“he cause of the offending event, namely the attempt to read from 
a non-existing RAM address. The use of the command "lAFTER A8 
‘ADR S" shows that the stack is growing to the point where it 
overflows. The cause of this stack growth is identified by using 
the command "A8 AS" this shows the PUSH at memory location 8C the 
hex code for which is D5. Explain that the occrence of the push 
without a POP will cause what stack overflow that is occurring. 

A brief discussion of memory patching may now be inserted and 
then demonstrated by changing the D5 to a 00. The 00 is the hex 
code for a no-op. This operation is performed by using the 
command "0 8C M!". The fact that the BUG has been fixed is shown 
by re-typing 8 "A8 AS" and noting that the push has been replaced 
by a no op, and that the program no longer crashes. Now co: 
restarts and F5 fills the trace with boring delay loop cycles. 
you may now explain how these boring cycles may be eliminated as 
block. This done by using "ONLY NOT AO TO BO ADR AFTER 80 ADR S" 
This shows program operation without delay loop. The basic 
demonstration of the analyser is for the most part complete. 


Proceed on to the debugger. Discuss running to a breakpoint, 
running to multiple breakpoints etc. "RESET 80 RB" runs to 
step 80 but does not execute. The internal registers are 
displayed and may be modified etc. 


* ok 


‘resetting 
(from top of buffer) 


cy# CONT ADR 


B7 0000 
B7 0003 
B7 0007 
B7 0Q00B 
B7 QOQOE 
FT 1900 
D7 1900 
B7 QQOF 
F7 1900 
D7 1900 
B7 0010 
B7 0011 
B7 0012 
B7 0013 
B7 0014 
B7 0017 
B7 OO1A 
.B7 QO1D 
F7 0100 
D7 1800 
B7 QO1D 


or TR (trace resume) 


CONT ADR 
F7 0101 
D7 1801 
B7 OOLD 
F7 0102 
D7 1802 
B7 001D 
Fy) 003 
D7 1803 
B7 001D 
F7 0104 
D7 1804 
B7 OO1D 
F7 Q105 


D7 1807 
B7 QO1D 


or TR (trace resume) 


DATA 
31FE18 
DD213412 
FD217856 
210019 


48 read 
49 write 


49 read 
4A write 


14 
210001 
012000 
110018 
EDBO 

16 read 
16 write 
EDBO 


DATA 

FF read 

FF write 
EDBO 

3E read 

3E write 
EDBO 

80 read 

80 write 
EDBO 

D3 read 

D3 write 
EDBO 

7B read 

7B write 
EDBO 

3B read 

3E write 
EDBO 

01 read 

Ol write 
EDBO 


LD SP,18FE 
LD IX,1234 
LD IY,5678 
LD HL,1900 


INC (HL) 


INC (HL) 


INC 
INC 
INC 
INC 


vUUUD 


LD HL,100 


LD BC,20 


LD DE,1800 


LDIR 


LDIR 


LDIR 


LDIR 


LDIR 


LDIR 


LDIR 


LDIR 


LDIR 


HDATA 
gps HEB 
DILL aa 
Lia 
pe Ss eee a 
i op Ges HE 
PILI. 
VELL LI 
11111111 
Wei De Ge 
pies Bg FE 
2 es eee Ee 
11111111 
Lidia 
LAL 


LEE 


LiL ibis 
gs eV eG 
11111111 
TItlirid 
11111111 
ie oe sa 


TT (top) n TIN (from 


HDATA 


Dp i a 


0S Bs ea ee 
Fs se 
oe ie aD a 
ELE LEL EL 
LLL 
se Ce BB a 
Lier 


S24 20051 


11111111 
gp ep ee 
Aa ea BO a 
Titel 
11111111 
LLigiititt 
11111111 
LADLE LL: 
6 a Ga as Oe Da 
11111111 
11111111 
Livi id 


TT (top) n TN (from 


MISC 
11111111 
x a a 
TVLELI 
Ie We es ee Os 
Lidia 
bs ea a 
LEVEE 
es a se He 
5 gt a Os BLE 
11111111 
5 Be Be Bs UC 
ua ie 
J1111111 
11l1l1lil1lll 
yee cs Ee 
11111111 
LITT 
11111111 
11111111 
oye oy ep es Ge 
ea a sa 
step n) 


MISC 
11l1lilll 
Litiiayi 
i ei 
Miia 
Liiiiits 
Be Ss eps UE 
Liars 
ELLs 
i opt Pl 
VTIL ETL 
Lilli 
Lied 
i Os es Ws a 
Li Ea dd 
it ES a en 
ug Ba at at st 
ji al se 
LITLE AT 
it ee 


i es We i oS 
1 We es es 


step n) 


T (from n=-5 ) 


T (£rom n=-5 ) 


ONLY WRITE § resetting 


Not done till delay count = 0. Any key aborts. TD dumps trace buffer, 


7 SR resetting 


cy# CONT ADR DATA HDATA MISC 
-5 B7 QOA6 20FA JR NZ,A2 LIT. atid 
-3 B7 OOA8 C9 RET 11111111 11111111 
-2 F7 17FE FF read 11111111 11111111 
-l F7 17FF FF read Lilia PEs 
O B7 FEFFF 1831 JR’ 32 11111111 llillllil 
1,2 B7 0032 57 LD D,A WALI. Lalli 
3. iB? 0033 F3 DI 11111111 11111111 


TRIGGER Wait Status: DELAY Count = 0 PASS Count = NONE(from top of buff: 
cy# CONT ADR DATA HDATA MISC 
FOL FF FFCD FF read PELVIS iad 
FO2 D7 1900 4B write VUALAULIE LIP rid 
FO03 D7 1900 4C write LID Lae 
FO4 D7 1800 16 write 11111111 11111111 
FO5 D7 1801 FF write is es eT) Ue Et We Ut 
FO6 D7 1802 3E write LIVE SIE ee 
FO7 D7 1803 80 write LEE ET aa 
FO8 D7 1804 D3 write LLP tera 
FO9 D7 1805 7B write Le La 
FOA D7 1806 3E write Tie ee 
FOB D7 1807 O1 write 11111111 11111111 
FOC D7 1808 D3 write PUTA: aaa 
FOD D7 1809 79 write 11111111 11111111 
FOE D7 180A OF write ap i st es ed aU 
FOF D7 180B 14 write LILI Liltiiid 
F10 .-D7 180C 62 write ELLIITIf Ait 
Fl1l D7 180D 6B write PLIES tilda 
F12 D7 180E 2D write Ua es Ui Fg Fa HU 
F13 D7 180F 20 write LEDPIITITL itis 
Fl14 D7 1810 FD write 11111111 11111111 
F15 D7 1811 25 write Pid atid 
F5 or TR (trace resume) TT (top) n TN (from step n) T (from n=-5 ) 
NORMB FETCH NOT 0 TO 100 ADR S resetting 
Not done till delay count = 0. Any key aborts. TD dumps trace buffer. 
- cy# CONT ADR DATA HDATA MISC 
-5 B7 OOA6 20FA JR NZ,A2 a3 VD Et ge i eo Bt 
-3 B7 00A8 C9 RET LEE. ik ed 
-2 F7 17FE FF read - LE PAT: aE ad 
-l F7 17FF FE read LLLP. dia 
0 B7 FFFF 1831 (Sp 5 dea LITTbILS didi 
2 B7 0032 57 LD D,A PLL are 
3 B7 0033 F3 DI LETT. Pia bit 
4 B7 0034 00 NOP yO Be pHs eH 2 Bt 
End of Trace Buffer TT (top) n TN (from step n) T (from n=-5 ) 


.LAFTER A8 ADR 


‘Not done till 


cy# CONT ADR 


FO 
_ FO2 
FO3 
FO4 
FOS 
F06 
FOQ7 
F08 
FO9 
FOA 
FOB 
FOC 
FOD 
FOE 
FOF 
F10 
Fill 
F12 
F13 
F14 
F15 
F5 


EF 
B7 
F7 
B7 
F7 
B7 
Ey 
B7 
B7 
B7 
F7 
B7 
F7 
B7 
BY]. 
B7 
Ee 
B7 
F7 
B7 
F7 
or 


FREE 
00A8 
18FA 
00A8 
18F8 
00A8 
18F6 
Q0A8 
18F4 
Q0A8 
18F2 
00A8 
18F0 
00A8 
18EE 
00A8 
L8EC 
00A8 
18EA 
00A8 
18E8 


TR (trace resume) 


S resetting 


delay count = Q, 


DATA 


90 read 


A8 AS resetting 


Not done till 
cy# CONT ADR 


“9 
=3 
22 

0 


MVUAWPWAAWNE 


B7 
B7 
B7 


00A3 


O0A3 


TR (trace resume) 


RET 


RET 


RET 


RET 


RET 


RET 


RET 


RET 


RET 


RET 


delay count = 0. 


DATA 
20FD 
25 

20FA 


00 write 
90 write 


20FD 


JR NZ,A2 
DEC H 

JR NZ,A2 
RET 


JP 88 


OUT (79),A 


RRCA 
INC D 
PUSH DE 


CALL AO 


LD H,D 
LD L,E 
DEC L 

JR NZ,A2 


HDATA 
ye x a Eee 
1111111 
es es 
ae es et EN 
A ee oie 
LE LLL 
Bp Gs ie ia ee 
gp i a 
Lied 
LLL t 
lll1liilll 
LLP EELS 
LLL iiit 
ui I i Ot 
ELE SL 


pe lee i 


LALIT 
PULVLELT 
ee comee! 
isbehe gn 
ITI. 


TT (top) n TN (£rom 


MISC 
l1l111111 
LET 
11111111 
i se id We i 
11111111 
es it Gia o 
LEP 
LLTILIIE 
i i ig 
LITLE 
11111111 
A i Ee Ee a Be be 
lilllilill 
11111111 
tes i We 
11111111 
ts I Ges 
l1l111111 
11111111 
11111111 
11111111 
step n) 


Any key aborts. TD dumps trace buffer, 


T (from n=-5 ) 


aborts. TD dumps trace buffer. 


HDATA 
LUTE LS 
LVI. 
lillillll 
RES eK 
PLETE EL 
Liddy 
LULL 2 
ig Mt it a 
lll1li111 
LiPo 
PEELS 
llllillil 
aN os i 
LT EL eed 
WD 
PEPE LILY 
LLL 
ip Wa 
LiL LTS 
gs Bs es BF 
11111111 


TT (top) n TN (from 


MISC 
LPL LIELEL 
ie Oe ese a 
LUPE IL 
TEs ey 
pS BSN EOS 
Tid eae 
ae ate a 
Lt LEE od 
Litiiiil 
littl 
it BB 
i a Ds i 


diLTLIITL 


yt oe a i 
11111111 
pe ds ee Be 
Kp at SOs 
ae os AO a 
ga a De He 
Lida 
11111111 
step n) 


T (from n=-5 ) 


0 8C MI! ok 
A8 AS resetting 


Not done till 


cy# 
-5 


CONT ADR DATA HDATA 
B7 QOA3 20FD JR NZ,A2 11111111 
B7 QOA5 25 DEC H a gs Se 
B7 OOA6 20FA JR NZ,A2 LELLELIL I 
B7 O0OA8 C9 RET Viti til 
F7 18FC 90 read el WS Vet oe We 
F7 18FD 00 read ys Ds EE 
B7 0090 C38800 JP 88 11111111 
B7 0088 D379 OUT (79),A 11111111 
5F 8079 80 out ys Be os ae a 
B7 OO8A OF RRCA 11111111 
B7 008B 14 INC D> LILLIA. 
B7'008C 00 NOP ops es De | 
B7 008D CDAOOO CALL AQ 11111111 
D7 18FD 00 write 11111111 
D7 18FC 90 write hs GU Be § 
B7 OOAO 62 LD H,D 11111111 
B7 OOAl1 6B LD L,E PATIL SL 

‘B7 QOA2 2D DEC L 11111111 
B7 00OA3 20FD JR NZ,A2 11111111 
B7 0OA2 2D DEC L 11111111 
B7 00A3 20FD JR NZ,A2 4 ee ee 
or TR (trace resume) TT (top) n TN (from 

CONT ADR DATA HDATA 
B7 OOA2 2D DEC L LLL 
B7 OOA3 20FD JR NZ,A2 it is i 
B7 QOOA2 2D DEC. “L LET Lid. 
B7 OOA3 20FD JR NZ,A2 os a a 
B7 OOA2 2D DEC L lll1ililll 
B7 00A3 20FD JR NZ,A2 LEAVE 
B7 OOA2 2D DEC L de Ee 
B7 QOA3 20FD JR NZ,A2 6 Ws Ee Oe Ba 
B7 OOQA2 2D DEC L coe 2 ON ell gt 
B7 OOA3 20FD JR NZ,A2 11111111 
B7 OOA2 2D DEC L 11111111 
B7 00A3 20FD JR NZ,A2 FU Fp 
B7 OOA2 2D DEC [ LET LAA 
B7 O0OA3 20FD JR NZ,A2 l1l1l11111 
B7 OOA2 2D DEC L ce ee iS 
B7 0O0A3 20FD JR NZ,A2 dl a Cel a Be 
B7 QOA2 2D DEC L Llillill 
B7 0QOA3 20FD JR NZ,A2 11111111 
B7 QOA2 2D DEC L LiL1i114 
B7 OOA3 20FD JR NZ,A2 se ian Oh a 
B7 OOA2 2D DEC L l1lil1l111 
or TR (trace resume) TT (top) n TN (from 


Gelay count = QO. 


MISC 
ie a 
i i Oe a la Be 
sea is Es os 
l1l111111 
LAAT. 
A a i oa De OB 
0 eB Ua ee Oe 
l1i1l1l1llil 
11111111 
ee Sas SD 
LPL 
l1l111111 
11111111 
ip eB 
LELiTi.11 
LLL TL 
L1l1i11111 
l1l1i1l1111 
ys Uh i Bs eS 
l1l1l1l1111 
LETT 
step n) 


MISC 
lililllil 
11111111 
LAL EEE 
llllilll 
lllillil 
LELEL ELE 
lilillil 
us 
LETT iA 
dR Bs ee ie 
a be bes Fa es 
lll1l1l1lill 
lll1l1lilll 
l1l11l1111 
Wi Wes ee I 3 
Lillilll 
lllilill 
L1l1lil1l1ll 
pS Do: Ea oa oe 8 
lillllll 
L1ll1l1111 
step n) 


Any key aborts. TD dumps trace buffer, 


T (from n=-5 ) 


T (from n=-5 ) 


‘ONLY NOT 


AQ TO BO ADR AFTER 80 ADR § resetting 


TR (trace resume) 


Not done till 
FO2 F7 OO8L 
FO2 B7 0082 
FO4 B7 0084 
FO6 5F 807B 
FO7 B7 0086 
FO9 B7 0088 
FOB 5F 0179 
FOC B7 OQO8A 
FOD B7 QO8B 
FOE B7 OO8C 
FOF B7 008D 
F12 D7 18FD 
F13 D7 18FC 
F14 F7 18FC 
F115 F7 18FD 
F16 B7 0090 
F19 B7 0088 
F1B 5F 8079 
F1C B7 QO8A 
F1D B7 008B 
F1lE B7 OO8C 

F5 oc 
cy# CONT ADR 
F1F B7 0O8D 
F22 D7 18FD 
F23 D7 18FC 
F24 F7 18FC 
F25 F7 18FD 
F26 B7 0090 
F29 B7 0088 
F2B 5F 4079 
F2C B7 QO8A 
F2D B7 008B 
F2E B7 O0O08C 
F2F B7 O0O8D 
F32 D7 18FD 
F33 D7 18FC 
F34° F7 18FC 
F35 F7 18FD 
F36 B7 0090 
F39 B7 0088 
F3B 5S5F 2079 
F3C B7 OO8A 
F3D B7 QOO8B 
F5 or 


TR (trace resume) 


delay count = 0. 


FEF read 
3E80 
D37B 

80 out 
3E01 
D379 

Ql out 
OF 

14 

00 
CDA000 
00 write 
90 write 
90 read 
00 read 
C38800 
D379 

80 out 
OF 

14 

00 


DATA 
CDA000 
00 write 
90 write 
90 read 


00 write 
90 write 
90 read 


LD A,80 
OUT (7B),A 


LD “Ay 01 
OUT (79),A 


RRCA 
INC D- 
NOP 
CALL AO 


JP 88 
OUT (79),A 


RRCA 
INC D 
NOP 


CALL AQ 


JP 88 
OUT (79),A 


RRCA 
INC D 
NOP. 
CALL AO 


JP 88 
OUT (79),A 


RRCA 
INC D 


ll1li1llil 
ce I ee ie ea 
a Be ih i Be eb 
TILL 
ys ee 
hs Os a a bea 
11111111 
Lit iitt 
pe i ie 
TELE 
PELLET 
as i oe as Un 
a se 
11111111 
st 9 Bet 


ALI. 


11111111 
LITLE LS 
PELE LS 
PLU EEL 
Bt 


TT (top) n TN (from 


HDATA 
11111111 
Tis Gp i Da 


s¥LEELIIL 


eT 
LEC 
ap Be de Wa a 
os Fi OE 
tbe se 
i fa Fos 
LiL) 
pi ps Bt 
Lidgiliit 
fas ae 
i he Va 
11111111 
Ip fet 
LETTE ELA. 
LiTLilit 
ELIAS 
i Oe 


11111111 
TT (top) n TN (from 


me ie is a ee 
pO eee ss 
bl Bs a 
i 
LULL LIES 
i ie I as 
x fel a a Ge 
gis Eas 8 a Be 
iO es is ee es EE 
pi Wig 
TALIA EE 
up i a 
11111111 
pe ps Be iE 
TELILIELSL 
i SOE 8 EB 
1 Be es 
a Eas sg 
Lid 
11111111 
se Es Fs 


step n) 


MISC 
bs Es 
bes 
LAL ELL 
us Hn i iP 
Lia tirts 
LiL ed 
pts Bt Bs 
i Be pe 
ul Kah Fas 
Titi 
1l1llilill 
se i et 
i as a Ea eB 
et es 
LED TLL 
ida 
Lei s 
lliilill 
ll1l1l1iill 


Lidia T. 
x a Hs a ln 


step n) 


Any key aborts. TD dumps trace buffer. 


T (from n=-5 ) 


T (from n=-5 ) 


RESET 80 RB resetting 


AF=1801 (sz-a-pnC) BC= 


0080 I16FF LD -D,FF 

N 

AF=1801 (sz-a-pnC) BC= 

0082 3580 LD A, 80 
ok 

N 

AF=1801 (sz-a-pnC) BC= 

0082 3E80 LD A,80 

N 

AF=8001 (sz-a-pncC) BC= 

0084 D37B OUT (7B),A 

BYE 


DE=1820 HL=FFFF 1X=1234 1Y=5678 SP=18FE pc=° { 


(next step) ok 


DE=FF20 HL=FFFF IX=1234 IY¥=5678 SP=l18FE PC= 


DE=FF20 HL=FFFF IX=1234 IY¥=5678 SP=18FE PC= 
(next step) ok 


DE=FF20 HL=FFFF IX=1234 IY=5678 SP=18FE PC= 
(next step) ok 


€ 


E 


FINDING THE BUG IN DEMO2.BIN 


After enabling emulation memory (QO to 7ff emenable) and 
loading the demo program (0 to 7ff binload demo2.bin) 
start it up by using FY in the command Mode. The screen 
should fill up with a trace Of the program’s initial 
execution and the LED's should ripple. In a short while 
(half—minute or 50) the Program should crash as is « 


evidenced 
by the fact that the LED's have ceased rippling. We've got a 
bug. 


FINDING THE BUG: THE COMMANDS (ALWAYS FOLLOWED BY RETURN) 
- NORME FETCH NOT © TO 100 ADR § 
- 7 SF 
~ LAFTER AS ADR § 
- AB AS 
= VO 8G. 14 
- AB AS 


ONLY NOT AO TO BO ADF AFTER SO ADR § 


EXPLANATION OF EACH COMMAND IN ORDER OF AFFEARANCE: 


~ NORMB FETCH NOT © TO Loo ADR 
NORME tells the UnilLab to clear out any current triaqger specs 
and put the trigger event at the bottom of the buffer, In 
other words, the majority of the trace buffer Will be filled 
with events before the triggering condition with Only five 
bus cycles after it, The trigger is Always labeled cycle oOo.” 
FETCH says that you only want to trigger on a fetch and not 
on some other operation. 
NOT © TO 100 ADR says that yOu want the UnilLab to trigger 
when the CFU is operating (in this case, fetching) outside of 
the address range af O TO 100, 
5 simply means reset and start the processor, 
SUMMARY: This command tells the UniLab to freeze the trace 
buffer (trigger) when the processor tries to fetch from 
Outside the address range of © to 100 and put that event at 
the bottom of the buffer. At cyclet © in the trace (the 
trigger event) you should see that the Processor tried to 
fetch from address FFF, clearly outside its normal range of 
around © to 100, 


Tt tried to fetch from here because garbage was read from RAM 


an the two preceding cycles. 


em fe SEN 
7 SR tells the UniLab to start the proceg¢gor again with the 
game trigger specification and show just 7 cycles. After it 
does this it will automatically restart and do it again until 
you press any key. This is just a quick test to see if it 
just happened to crash this way only this time. 


-  LlAFTER AB ADR S 

This command tells the UniLab that you want the trace buffer 
tao be filled only with what happens at address 48 and 1 (Cone) 
cycle after it during multiple passes through the program. 
This is an example of the UnilLab’s filtering capabilities. 

We are using this to gee what’s nhappening after AB because 
the crash oceurs right after A8 when garbage somehow put and. 
eventually read from FAM. 


- AB AS 
This is an abbreviated command which tells the UniLab to put 
the trigger at the top of the buffer and start it at address 
AQ. This could aleo be entered by typing NORMNT AB S. We use 
this command to look further down the buffer after 48 to see 
What it reveals. We find that at address SC there ig a push 
instruction. Scrolling down through the buffer reveals that 
thie PUSH is never popped. We thus get a stack overflow 
which is putting garbage in RAM and causing the pragran to 
crash. 


=~ BG Mt 
This command tells the Unilab to store a © at address AC. 
Mi is a command which simply stores a byte of data at the 
specified addrees. In this case, we*re storing © (a NOF 
instruction in Z80 cede) at address 8C in emulation memary in 
order to nullify the offending FUSH instruction. Thies is the 
paink where we are actually patching or fixing the program. 
We could have also used the on-line assembler by entering: 
BC ASM (to invoke the on-line assembler at 8C). 
QO (entering the NOF instruction at address BC). 
Fressing return twice. 


- AB AS 
Explained above. Note, however, that at addrees SC we now 
have 0 (2780 NOF instruction) and not the offending FUSH 
instruction. ; 


t 

- ONLY NOT AO TO BO ADF AFTER SO ADR S 
This command is optional because it is rather bulky. 
However, it is an interesting example of a combination of 
bath filtering and qualifiers used in a trigger spec. 
This command tells the Unilab that you only want to see what 
happens after address 80 that is nok within the range of AO 
to BO, In this way we get to see address 8C three times on a 
single screen and are able to verify that indeed © is in 


location 8C. & weer may do something like this when he or 
she already knows that the code in a certain range - in this 
case AQ to BO —- is functional and therefore does mot want it 
filling up valuable space in the trace buffer. 


iv! 
ae 
or 
ic 
is 
i 
iz 
je 
‘Oo 
13 
ia 


Cro microcorescessar 
Separate cata ane acaress lines 


ean 

ia 
io 
ie 
11] 
tes 
nas 
O 
1g 


Maltviniexead woree and Lower adqaress Lines 


644 memory acddaressing Clu OMNKERS Into 
OQnerating Frequency +: OC ta 4.2. S Mez 


Features: Un-ehio ciock 
One-carea Dime 


OIRECT 
ADORES SABLE 
EXTERNAL 
MEM. 
K-BYTES 


DEVICE 


™~ 
ys COP1802A ° 


COP 18028 Sa 


« Wot err COP1804A 


N) oe, \gorl 
r) NP 


copis0sa 
eloPmendt 


COP 1806A 


“> itlab interface consiaerations: 


3 iyzer Caole & 


Maxinun Clack Goeea: >) GS MHz cieck input (S 


| Peas ssagesy> Ci 1 mc k, 
UniLlab does moe nave deoug capabilties 


Reserved Areas: None 
Overiay area: None 


Unilab clack: RD- Mn 


WR MAR 
Kd. Nat usec 
Ke Net used 
UDL status lines: C4. Not Used 
Go Not Usec 
C& Cle 
C7 71 Ba 
Cycle types: _CONT_ 
Feten SF 
read Ce 


write or 


wi 


mee 


§.0/7.5 


3.2/4.8 
3.2/16.0 


3.2/16.0 


3.2/16.0 


nilLab elocu 


LGwe Family. 


BITS 


INSTRUCTION TIMER/ 
TIME COUNTER eas 
MIN/MAX. ShArET 


tarnicdard Unilab) 


ravi: 


THE G301/23 


MICROPROCESSOR FAMILY 


mn ee ne cee ee ae ee meen re ee ee eet Seed ne A ee nS ee en ee Ce nen ee AS Me ae ee ee ee 


632i Microprocessor 


B-bit micropreacessar 

Multiolexeg or Nen-multiolexed mzdes 
Internal ROM 

Internal RAM 

‘Abundant’ on-cnin Funet ions 
Gperatina Frectiency + 1,1.5,2 Miz 
7 different 
internai RGM 


modes oF mperation. 


disavled (Mades 1,&@ and 4) 


B&2PO4 


(pigoyback) microoreacesseor 


HSupoperts GGai Microorscessar 


KOMvLess versions EPROM socket on too | 
mr chip. Unilhaby supperts modes (1-7). 


6S38SR Micrsoprsecessar 


Supgorts B4W2 Microorccessar 
ROMiess version 

3 cifferent modes of cperaticons 
Unilago suppearts all modes. 


63@3X arid GSQSY Micropracessars 
CPU cmampatible with Gaal Micrsorsacessor 


64-91% oackane 
ROMLess comin 


Mare RAM 
More I/O Parts ' 
More adundant ane-chio features 


6321X and G301Y Microprocessors 


CAU connmatiole with GaWi Micrcaprecessar 
internat ROM 

6301X has internal ROM; must pe used in Mode 
G341Y has internal ROM: must be used in Mode 


UniLlab supports tnose modes that 


Type No, 
HO6301VI 
_HO63A01V1 
HO63801VI 


Dus Timing 
1 Mitr 
1.6 Miz 


have 


HOSIPOIMI, HOBIPAOIM}, 
HO6IPBOIME 


{0C-40F) 


Type No, 
HO6303R 
HOG63A03R 
HOG3IBOIR 


Bus Tlming 
1.0 MHz 
1.6 MHz 
2.0 MHz 


( 


f= 0.1 to 1.0 Miz; HOG303Y 
f= 0.1 to 1.6 MHz; HD63A03Y 
{= 


£° 0.5 ~ 1.0MHx; HO8303X 
f=0.6 ~ L.5MHz; HD63IA03X 
(= 0.5 ~ 2.0MH2z; HD63003Xx 


0,1 to 2.0 Miz; HOG3B03Y 


ROM disabled) 
ROM disabled) 


1 Cinternal 
1 (internal 


* 


Jectoar Table 


Address Descrintion 
a gt aa ges a Res 
Fres-n TRAMP (acdceress ar to-eode error) 


FFEC-ED 
FEF A-FE 


FFFQ-F9 


(software it) 


UniLlab interface considerations: 


7 
ul 


Cable B far 


Analyzer 
Analyzer Cable WN 


B3U1, GGWGR, GSWSXK anc 
Diggybacew chino (6471) 


BaSUay 


peer 


eee SEL ONE VETER 


Fr sortulanss SKPT. 


saftware oreakooint. 


Reserved Areas: FRFFA-FR or FFEE-EF Vector location for 
FFFC-FD Vector ingecation for Aardware breakooint. 
FrPEOG-BA Reserved iacation for interrupt routine 


pedi 4) 
im this 


Overlay area: Starts at FFEE, 


werk oroperlty 


oytes Geen; 
AeA, 


debug 


Maximum Clock Soeed: if MHz clock inout (Stanaarcd Unilab 
Princessar clock ta Unilab clocn 
UnilLago clocks RO- E& 


CLocr 
de 


Nave 


moerad Laws 


) 


raticas 


(rel). 


n Fn 
Yiae 


wii: 


4of 


‘) 
Res MSed 
KL Nok usec 
Khe Nat weed 
io status lines: G2M1/02R ~83Pat wn BAX LOGY 
C4 Net Used Mot Used: WR (pict 7. 1) 
Co Not Used Naty Used RD- (Aart 7.) 
Ce “Not Usec Net Used Lode ABNER wae) 
C7 Soe Nat Usea R/W (Pmt 7. et 
Cycle types: E381 703K ~BsP@1 wn DISK /SOSY 
Fetch ee ool Be OCS ape Ga 7 geo (first oyte) 
FF (exc. 20.) LF 
read EP Waa Gd Di 
write Le Fda Al wl cl GF 
EM6E3 Emulation Module is oresosec for the G44SR processor. Release cate ta 
be armaunced. 
Software considerations: 
Special commancas 
TRAP change breakooint coecdge From GWE (GF) toa mw. Tne ‘illegal’ opnceade 


oets travoed, vectering tea the imstalled oointer 


E5aX and 651xX Microprocessors 


8-bit micrsoreacegsear 
Separate data and adcres 
Operatina Freauencyv 3 


S lines 
1,2,4 Miz 
Features: Interruot reduest : 

Nen-maskabple Interronut 


Model - 


6502 
N6503 
N6504 
N6505 
R6506 
6507 


64% Gadressirne Made! 
Bus campatiole with Gerad Hee 
F6514 


ke 


a 
Cs. 


Ces 


65/11 and 65/41 ‘Backpack Emulatar? 


Multiplexed a NMen-muwltiolexed nodes 


Qnerating Frequency: 1,2 Maz 

aa 

2 65/11 is the PROM orotetyoing version 
he + he O-bit, masked-ROM 632/711 OPacegsear, 


Late 


THEMES / 41 is the PROM Dratetyping versian 
ar tne A@-bit, masked—(an GS /4i orocesseay, 


G911@ and 65010 oreacessars 


Multiolexed ar None tiolexec 
Operating Frequancy: 1,2 Mez 
Features: i92 oyvte static RAM 
% 1/0 ports 
Two 16-bit orcogrammable timers 
Seria port 
fen interrupts 


nace 


Software Consideraticns: 
Special canmancs 


charge the POGE 


=ASAVE’ tea MW loeeation used far Saving toe AW red: 
=DADR to chanse external RAM “BIANG. Spaeth 
=INTADR to osint te wser?s TRO handling routine, if any. 
Per RAM if your oipgev back system has external RAM, use whis 
a configuration word, 
aT. for GS. DPacwage —- for the G&S5i@a AYICeSsor ie Commodi Gah 
ae Shows ali bus evcles. 
AL vy 


6515 


(piguoyback) 


No. Pins 


No. Pins 


40 
26 
20 
20 


Part 
Number 


REV IIEB 


R6S/ITEAB 


Part 
Number 


R6S/41EB 


R6ES/41EAB 


Part 
Number 


R65010 
R6501AQ 
R65110 

R6511AQ 


Microprocessors with Intacnat Two Phase Clock Gonerator 


Addressable Memory 


Addressable Memory 


“ALL have JR interrupt exceat 6507. 
AMT interrugt available only on R658, 03, 12, 13. 
» SYNC line availadie only on RES8Z, fc. 


enios 


Memory 


Capacity 


4K x 8 


4K x 8 


Memory 
Capacity 


Package 


64K Bytos 
4K Bytos 
8K Byies 
4K Dylos 
4K Bytos 
8K Byles 


Microprocessors with Extornal Two Phaso Clock Input 


64K Bytos 
4K Bytos 
OK Dytas 
4i€ Bytos 


Compatible 
Memorles 


2732 


2732A 


Compatible 
Momorles 


2732 


2732A 


Type Option 
Plastic (QUIP) ~ I Mite 
Plastic (QUIP) 2 Mite 
Plasitc (QUIP) 1 Mitx 


Plastic (QUIP) 


2 MHx 


Frequency 


Temperature 
Range and Speed 


0°C to 70°C 
IMi{z 


0°C 10 70°C 
2 Miiz 


Tamperature 
Range and Speed 
O°C to 70°C 
IMHz 


O°C to 70°C 
2 Mitz 


O°C ta 70°C 
09°C to 70°C 
0°C to 70°C 
0°C to 70°C 


Laver, 


oY emway 


Computer 


Vector Table 


JBDR=.. DESC. 
FEFE-= TRO 
FRFO-D REG 
FFF A~t NMI 


Jnilab interface comsSideratians: 


Analyzer Cable [It for 6'5ax, GSixX ang 6SXit 
Analyzer Cable K fer piggyback cnips (GS/7li, 65/41). 
Reserved Areas: "FF E-—F Yeetar lecation for software oreakooimt. 
RePA-E Vector location for hardware breanmpoir. 
rPACHFEEC Reserved area fran interruok routine CGrei). 
faue W lecation to save the A register (user specified-rel) 


rEMW—FEEE are used in such a way that you canmaot joke at 
external RAM at these addresses . Carn be reassiuned by 


Wer. 


Overlay area: msearts at FFEC, 12-204 bvtes deen; debua operations will not 
word Oreperly in this area. 


Maximun Clock Sneed: 2.5 Mes cleck input (Standard Unilab) 


S.4 Mhz Clock input (High Soeed Unilab) 


Unilab clock: RD~ ae 

a WR Nob ised 
4! Nook usec 
a | Ke Mob usec 


7 ; 
Utegetb status lines 


sea 

C3 
~. 

- 


Not Used 

2500 Net Used 

Ce Sync (active high for op-cede fetea) 

Cy R/VW— 

(Gn piggyback chips, C7 carmected to OF of bOiogdgyback 
srcket: CG not wsed) 


Cycle types: 


ESaxX w/SYNC Goax wo SYNC 697i), 65/741 
os i fetch FRE (first byte) ao VF 
: ENF FF -. fi 
read Ee rr VF 
, write oF van a 


EMGS Emulation tocule availabie for 6502 and GSC microorcscessors, 
Emulated target ROM must be removed Fran target system fer oraper 
eperaticn. 


THE 6900 MICROPROCESSOR FAMILY 


The 6802 and 6898 are software compatible with the 68Q0. 


The 6000 Microprocessor . Part Sneed 
NCBBOO 1 MHz 
8-bit microprocessor NCE8AGO bes 
Operating frequency: 1, 1.5, 2 MHz MCE8BOQ 2.9 
6808 additional features - Part Speed 
MC6898 L HiHz 
Internal clock oscillator and driver NCEBAGB 1.5 
MCE8BO8 2. 
680Z additional features 
Part Speed 
Internal clock oscillator and driver NC6BO2 1 MHz 
128 bytes of internal RAM MCB68AGZ2 Les 
First 32 bytes RAM retainable MC68B02 2.2 


( G8@2NS lacks this last feature. ) 


Software considerations: 


The 6002 package is necessary if there is internal RAM at 
addresses @-128 (decimal). It can be used with 6800 and G8O8, if 
there is exlernal RAM at those addresses-- but we recommend 
against il. 


Special. commands: 


6802 only: =ZP to change the starting address of the 
four bytes of RAM that are reserved by debug. 


MC6802 
MC6808 
MC6802NS 


S SUFFIX 
CEADIP PACKAGE 
CASE TA 


PIN ASSIGNMENT 


Wy) 


P SUFFIX 
PLASTIC PACKAGE 
CASE 71 


\ SUFFIX 
CENAMIC PACKAGE 
CASE 716 


L SUFFIX 
CERAMIC PACKAGE 
CASE 716 


mie 


ie ann P SUFFIX 


PLASTIC PACKAGE 
CASE 71 


"Pin 35 must bo tiod 10 B V on the MCGOO2NS 
* * Pin 3G must bo tied fo ground lor the MCGON9 


Vector Table 


Nddeeas Inteccupt 
FEE E-FF RESET 
FEPCO-FD NMI 
EFFA-FB SUI 

FFE B-F9 IRQ 


Unilab interface considerations 


Analyzer cable B for 6800, 6802, 6828. 


Reserved areas: FFFC-FD vector for hardware breakpoint. 
FFFA-FB vector for software breakpoint. 
FFBO-BA for interrupt service routine. (rel) 
68@2 only: SQO-S3 in internal RAM. (rel) 


Overlay area: FFEB-FFEF 
Breakpoint code: SFCSWI) inserted at breakpoint. 


Maximum oscillator speed: 
' Standard Unilab handles all Family members. 
10.@ MHz oscillator (2.5 MHz clock) with standard Unilab. 
High-speed nat necessary. 


Note The 6802 and 6808 have a 4:1 ratio between 
oscillator speed and processor clock speed. 
With the 68Q@6, the two clocks, @l and Q@2, must be 
provided by outside circuitry. 
For all members of this family there is a t:l 
ratio between processor and UnilLab clocks. 


Unilab clock: RD- @2 (phase 2 clock) 
E (clock output on 6802, G68e8) 
WR- VMNA (valid memory address) 


KL not used 
Ke not used 
Status lines: C4 not used 
CS not used 
C& not used 
G7 R/W 
Cycle types: 
fetch FF 
read FF 
write TF 
Note: Nebug notes for 6802 incorrectly show CG connected to 


the normally low BA output. BA goes high when the 
nrocessor igs in a WAIT state. 


ned 


pf 


SHAS MICKOPROC 


ESOSOR FAPZLY 


ene Unilab supaors igs designed for the L460dS 28. PS ice 25 
BOWS ana SOws Ditigyoack 


HARD a 


146 uns 

lle BYTES ON BOARD hee 

~- & BRDVEECTIONGL L/D ~I MES 
MULT Y ALEXED ADDREGS pare BUS 


CAN ADUOMESS UP Oe EX TE RAAL MEMORY 


LA GOES SF 


DANG AS AOoVe! BNcepy G4K external Memory addressine 


B68 oee 


llitacmirs 


aCmeumutatar 
index recister x 


he Okt Procram Potter 


SOFTWARE CONSIDERATIONS 


Hines this package Supoorts 
are A rnunber af oatbed words tin 


PRACA Sets software nackane for 
LAGONSES 


PRACK Gets software fror 
MDE Sas Gets gsafttware for 6305 
68W525 Gets seaeftware for AAS SS 
=ZP Cats ram locatier wased in 
Allev/aiiey? 
TCR/ Ter? Enables 
Orearmoodmt. 


fidaye mack pars for cevelooment 


1 ; 
“oot Stace Pointer hKegister with bit G set ¢a ¢ 


Oo2.t Cenoition Gade register 


Many versions of the tale 


contioure it. 


lodyback mode 


Zero pace by debug 
shows dees met show ali bus cycles 
‘disabies timer control register (sz) 


bEnere 


at oa 


a? 


Vector 
1460058 M46085e3 Gans BSS 

ie ar (2 + I | ces |e = tf fF ae IF Je Fe f nee [= { \- J FE ns Ir 

ci eee Pe, Pick =p FFOC—D Le PoeD 


Uniian interface Considerations 


Tne GOowS reauires a special ciock circuit wnhien is dart 


a7 the M-Cable. 


Anaiyveer Caple: 6B for L46095el/e3 and hd6sas 
M with cleek circuit for Gio) 4% 


Enulatar Cable CSE4 or 2A 


Reserved Area: «FFR9 - «FEA Oc =1 far ef and GSS, x 
66995 ana F fer e@3) 

Overtayv Area: MP BA-xFIES (x sane as abmve) 

Maxinun Clee Goeed: Mb Z 

Inniiab Clocks 146605 e2/e3 . 68n0a5 
RD- «cds To yeaa mn 
WIR NZC ew 
Bis. N/E NAG 


hee N/ZC M/C. 


Unilag Status Lines 


LI 


4, N/C N/C 
ea K/C NC 
Cé oo. N/C 
erg R/W- | N/(? 


NMI: OT AVATBLE ON THIS PROCESSOR, 


Cycia Types: : 
Fetih Fe YO FF CONT 


Read Ent ten BF CONT 


Write Sao ota @e CONT 


No emusation module available as vet. 


~ 


Cc 


Lackeireuit 


Sy fas Pia eared from 6809 plain 


PIN# 6809E 6809 
33 BUSY - for multiprocessing DMA - Direct Memory 
. . Access 
36 AVMA - processor will MRDY - stretch E, Q 
use bus on next cycle to extend data 
access time 
38 LIC - Last instruction cycle EXTAL - for simple 


TTL or crystal 
clock hookup 
39 TSC- three state control XTAL - ground for 


simple clock 


Speed 

1 MHz part MC6809E 
1.5 Mhz MC68A09E 
2 Mhz , MC68BO9E 


We can handle all of the above with a standard speed UniLab. 
Bus cycle time is crystal speed divided by 4. We can easily 


handle a 8 Mhz crystal driving the 6809E with a standard Speed 
UDL. 


Problems with Supporting the 6809 
We do have a 


"pluggy-back" in-circuit emulation board in the 
works for those who are not using either the MRDY or DMA lines in 
a 6809. We use a 6809E in the Circuit, and have a clock circuit 
built in. The usual reason people choose the 6809 over the 6809E 
is that the clock oscillator is simpler. We support the 6809E 
because of the LIC and AVMA pins which help our disassembler 
identify what is going on. The number of instructions, and the 
number of extra cycles on the bus, makes the job of writing a 


disassembler that will Stay in sync without looking at these pins 
almost impossible. 


opecial Commands 


OWI 


SWI2 To change the breakpoint opcode 
SWI3 


Reserved Vectors and Memory Areas 


FFFA,B SWI Vector ( relocatable to 
FFF2,3 or FFF4,5) 
FFFC,D NMI Vector 


FFBO-FFEF Reserved area and overlay ( relocatable 


eats - 


Breakpoint ‘Opcode 


UniLab Interface 
UnibLab Clock 


Status Lines 


Cycle Types 


Note that FETCH is the same as READ, since 
that the next cycle will be the first byte 


erg E 


TIN ASSIGNMENT 


HANOWANE FEATUNES | 


External Clock Inputs, & and Q, Allow Synchronization 


TSC Input Controls fotemal Bus Guilers 
LIC Indicates Opcade Fatch - 


AVMA Allows Elficient Usa of Common Rosourcos in a Multiprocessor 


System. ( 
DUSY Is a Status Line lot Multiprocessing 


Fast Intertupt Request Input Stacks Only Condition Code Registor and 


Program Countar 


Interrupt Acknowledge Output Allows Vactoring “ : 
Syne Acknowledye Output Allows tor Synchronization to External Event, 


Singla Bus-Cycta RESET 
Single 5-Volt Supply Operation 


RMI tnhivitod Attar ESET Wit Atiar First Load of Slack Pointer 
Early Addeass Vatid Allaws Use With Slowor Mamorlos 


Early Write Data lor Dynami¢é Matnoties 


MAP E EEO ope 


Hed ftece maa g, rl dive ( cre 4 
Pde bter aq. se 4 
Potton te att TC Oe ‘ bows, 
eed ar , 
ed ee | or ce beg ‘ he 
oad LA wos 
3 for SWI TO 
; : ” Peper eae L. foletpaaee tp. Poot ‘ | vee | 
da eee: GW Oi, ae 
Ll 3F for SWL3 ci ; ee tuo» ft 
fa phe ve Crpl tyr. eas 
rT a a) 
Analyzer Cable B, Re a eee, Ses ee 
44 ol e Ww 
RD E clock input 
C4 AVMA ( advanced VMA ) 
C5 LIC ( last instruction cycle ) 
C6 R/W 
C7 BS  ( bus status ) 
READ 10 to 3F 
WRITE 40 to 7F 
INYTERRUPT 80 to FF 
AVMA only tells us 
of an instruction, 
PIN aon RES 
HAROWANE FEATUNES Bie p28 
@ On-Chip Oscillator (Crystal Frequency = 4 E) ’ i 
@ OMAZUTED Atlows OMA Operation on Memury Relresh | | 
@ Fast Interrupt Request Input Stacks Only Condition Code Rogister 
and Program Counter Wor 
.@ MADY Input Extends Data Access Times for Usa with Slow 
‘Memory ‘ sein 
@ Interrupt Acknowledge Ouiput Allows Vecloting by Devices \ ; , 
) By Onvices ‘ s eToe pense Oulput Allows for Synchronization to Efritnal 
: @ Single Bus-Cycle RESET « [. — 
e Single §-Volt Supply Operation ‘ 
© NMI Inhivited Alter RESET Until Alter First Load of Stack Pointer 
@ Early Address Valid Allows Uso with Slower Mumoiles ' 
e 


Early Write Data for Dynamic Memories a eye 


cont 


WOE GGHCil MICROCONTROLLER 


HARDWARE FEATURES 

S-ybit Microcontroller 

Multiolexed address and data 

SK onocard ROM 

912 oytes endcand RAM 

BSG bytes mnorard standny 
(MiapaDie tbo any 44 Bomnigary) 

Mbit PUlse accumulator 

Serial Communications interface 

Serial Peripheral interface 

elghy channel, 8 bit A ta D 

Reai time interrust 

Computer Oneratine Properly 
(CO) Watchaca timer 


#1000 — 
#2000 — 


RAM 


$8000 — 


#0000 —~ 


#£000 — 


VFFFF om 
SINGLE 


CHIP 
(MODE 0} 


EXPANOEO SPECIAL 
MUX BOOT 
(MODE 1) ; 


SOFTWARE FEATURES 
Snnvanecec 
16xiG 
Hit 

wALT 
570A 


660a/22 anstruction 
integer and Fract ior 
MANLOMNLaAtGion 

nage 

mode 


set 
divide 


“PU Sedgisters 

G o.t Accumulators A and Hoorn one 
16 pit Index Reoisters X anc Y 

16 oit stacknointer Xegister 

~G bit Preoram Pointer 

8 bit Cemaition Code Recister 
Special function Revisters 


LGo0it aondle 


Mitre fo ns 


bak 
+ 


SQFTWARE CONSIDERATIONS 


imoorcer tea 


be disabled. 


EYiSUPeE Orcoer operation of cdebua 


00 
lal 

Leal 
Sle 
- < 8600] $12 BYTE EEPROM 
~~ [ow 


_ 


TF 
BF40 |] BOOT. ROM ‘(BFCO 
chee Ne 

as BEFF BIFF 

a 


_ [000] ax nom 
ie FFCO 
mn EFF FFFF 


Be 258 BYTE KAM 


accumuiatar D 


the COP shania 


64 BYTE REGISTER BLOCK (SEE TABLE 2.9) 


(SPECIAL MODES) 
INTERRUPT VECTO! 


(NORMA 
INTERRUPT YECTO! 


Soecial Commanas 

=SFPAGE Usea to teil tne cisassempler wnere Sixty-four special 
Function registers are mapped. Toe defauit is i mMAaADOING whem 
Trom b1@ga to Sigs, 


SHOW-REGS Displays special function registers 
SHOW-NAMES / HIDE-NAMES Shaw — do rot snow Specia 
register names with Gisasemoier. 


ace 
SWL Allows illegal oe 


breakomint. 


5WL 


mocede trap ta used anst 


1 funetion 


eac of Swl fer 


Vector Taole 
Table 3-1, Interrupt Vector Assignments 


. ce 
Vector Addrets Interrupt Source Register 
Mask 


FFCO, C1 Reserved 
° e 


Local Mask 


e e . 
FFO4, 06 Reterved 
FFO6, 07 SCI Serial System 
FFD8, 09 SPI Serial Transfer Complete 
FFOA, 08 Pulse Accumulator Input Edge 
FFOC, 00 Pulse Accumuletor Overflow 
FFDE, OF Timer Overflow 
FFEO, E1 Timer Output Compare 5 


FFE2, £3 
FFE4, £5 
FFEG, E7 
FFEB, E9 
FFEA, EB 
FFEC, ED 
FFEE, EF 
FFFO, Fl 


Timer Output Compare 4 
Timer Output Compare 3 
Timer Output Compare 2 
Timer Output Compare 1 
Timer Input Cepture 3 

Timer Input Capture 2 

Timer Input Capture 1 
Real Time Interrupt 


FFF2, F3 IAG (External Pin or Paraliel 1/0) L See Table 3-3 
FFF4, F5 XIRQ Pin (Pseudo Non-Markable Interrupt) VEY None 


FFF6, F7 


FFF8, F9 
FFFA, FB 
FFFC, FD 
FFFE, FF 


Swi # 


Ittegal Opcode Trap 
COP Failure (Reset) 

COP Clock Monitor Fell (Reset) 
RESET 


None 


Unilan Interface Comsicqerations 


The GG@HCi1L must pve configured to pun in the expance multiolexea 
moce (mode 1) by having MODE and mopa Oulled hich in reset, 


Analyzer Caodle ep born! kale 


Emulator Cable if Data Lines are Buffered COHDEA/ 28 ata CO lor 3 
Reserved Area: ¢FF71-sFF73 


Overiay Area: $8 F74-%FF EF 


Maximum Clack Speed: MHZ 
Unilab Clock: : RD- g~elocn 
WR- NC 
Al~ nse 
Az~ N/C 
Unilab Status Lines: C4 N/C 
. cs N/C 
Cé MODA/LIR 
C7 R/W- 


NMI: Carmects te XIRG- 


Cycle Types: 


Fetch BF 
Read ce 
Write 75 


No Emulation Medule avaible for this orecessar at this time, 


ORION 


INSTRUMENTS TECHNIC AL NQ TE Ss 


This nohe applies foo the Medseres daa GAIL “chip. 


io 


iv YOU are Using Che Mehorela EVE Eroard there gue a Few 


Ehings which have be be chore dm ooeeler te run oan this harqet 


beter 


These ihems are as follows: 


Il. 


ated 


Ayapr ld 


1.) The analyzer geound wire needs he bs mannechenct io psin & 


ure f Uy} ei oe 


eo) The ground wire asseciabed with khe Miscellaneous lines 
+ 


Lot ae te oh a 


el The emulater catle pees hes ibe shielded, 
fom ives Metered Fearn NPE kas Wace hy 
ched bebween pin 2G and pin Le of 
meonriemtioae Foon the underside of the bee. The UNILAE 
NMI wire is then cennecked to pin Le oof PL. 


fa,’ A LOR chm resister rece 


This regsishor ds ceremes 


Peas The UNTLAE regeke wire is meonnechecd ho AiG eh the end 


Perey 


mhogesh eo bhe peower ceoneckeer. 


internal memory kherefore the cata will look Lhe same 
as the low order address unless yoru hase eecherral 
"shachow RAM" ie. eechernal “am magoecd in kh sdeltress 


roo 
Space aa drkhernal FAP. 


fe) The @8HOLL coee nok bein goth feo bhe bucs bhe meas , prom 


The lash congicdereabion with this preecessar ois khak aif you 
Woe an internal stach and have bhe data lines but Pere hen 
youl reed he wee a COHDR4 oe CHHD2H Emulaher cable 


sa the 
anaiyoer lake dnpuba can tet connecked on the Precaagor side 
of  oburers, obherwige the chekourcy will nek Purest dion 
mongishenkly. . 


Khe ith aacecth 


mat Los Ee peer 


68000 and 68008 


the 68000 Family Maximum Address Maximum Data 
68000 - 4,6,8,10,12.5,7 24-bit 16-bit 
68008 - 8,10,? 20-bit 8-Bit 
68010 - 24-bit 16-Bit 
68020 - 32-bit 32-bit 


Bus cycle time is clock speed divided by 8. The actual timing 
requirements for the UDL/UniLab are more related to the time it 


takes to access rom data. We can easily handle a 10 Mhz 68000 
with a standard speed UDL. 


Problems with Supporting the 68010, 68020 have to do with the 
internal instruction cache. The 68010 has the capability of 3 
words, the 68020 handles 128 words. These caches can be disabled 
via hardware, so if the customer is willing to run in this mode 
during development, we can Support him. 


Comparison with other similar processors 


68000 overlaps fetching of each opcode for two step "pipeline" 
Z8000 only does prefetch under certain circumstances 
8086 uses extensive prefetch of up to 6 bytes 


8086 and Z800 have methods of simple and "expanded" (max) modes, 
68000 is always in "max"mode 


8000 can address directly up to 16M bytes, the 68020 up 
, to 4000M bytes 
"6.086 Handles 64K directly, but uses up to 1M with segment 
registers 


28001 handles up to 48M bytes using internal segment registers 
and external memory management, 


68000 operates in Supervisor or User mode, 
Z8000 operates in System or Normal mode, 
8086 has no modes 


80286 has Protected and Unprotected mode, 


68000 has 17 32-bit registers, 8 designated as'data, 9 as 
address, 

and all registers can function as index registers. 
8086 has 4 16-bit registers and 3 separate 16-bit index registers 


68000 has separate data and address lines 
Z8000 and 8086 have multiplexed data and address lines 
(smaller packages) 


Special Commands 


‘= FROMMYV 

=TOMV All used to extend addresses beyond 16 bit entry 
=TOGO 

=TRAP Change trap vector from 0 to F 

INTADR Set lower memory boundary used in disassembler 


logic. Defaults to $0400. Use 
value ' INTADR |! 


We are always in the Supervisor mode when DEBUG control is 
established, 


Reserved Vectors and Memory Areas 


80-83 Trap Vector (relocatable) 
7C-7F NMI Vector 
7AC-7FF Reserved area and overlay (relocatable) 
Breakpoint Opcode 4E 4n where n is trap # 
UniLab Interface Analyzer Cable P, 16 bit rom cable for 68000, 


8 bit cable for 68008. Chip comes in a variety of packaging, from 
64-pin dip to 68 pin quad pack, leadless chip carrier, and pin 


grid array. True NMI requires toggling 3 pins. May require extra 
circuitry, 


Maximum oscillator speed: 

Standard handles all family members. The timing of the 68000 
ds quite complex. The Simplest statement to make is that the 
clock is 8 times the bus cycle time. The limiting factor has 
more to do with memory access times. We have not experienced any 
difficulty running at 12 Mhz with a standard unit. 


UniLab Clock K2 AS (address strobe) 
KI DTACK ( normally grounded 
for simple systems ) 


RD Not used, recommend strapping high 

WR Not used, recommend strapping high 
Status Lines C4 FCO 

C5 FC1 

C6 FC2 

C7 R/W 
Cycle Types User write 1x 

Supervisor write 5x 

User read 9x 

User fetch Ax 

Supervisor read Dx 

Supervisor fetch Ex 


Interrupt Fx 


THE 9048 MICROPROCESSOR FAMILY 


Internal 
Part Program Memory 
87438H EPROM 
874951 EPROM 
BO4SNH 1K x8 ROM 
8049AH 2k x8 ROM 
ROSONH 4K «8 ROM 
BOSSAHL none 
8SO3S9AHL none 
8SO4QAHL none 


The major features ara: 


8-Bit CPU 

{Kk x8 ROM Program Memory 
_ &4 xB RAM Data Memory 

ce? I/O Lines 

8-Bit Timer/Event Counter 


Uscilator speed: { to LL MHz. 


Internal 


Data Memory 


64 x8 
128 x8 
256 x8 


Sil ratio between oscillator Bpeed 
and processor clock speed. 


Locations in data memory is acc 


essed indirectly using RO &RL 
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PIN CONFIGURATION 
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Figure 12-2. Program Memory Map ols 
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Pao Sa a 


Figure 12-3. Data Memory Map 


Unilab interface considerations 


Analyzer Cable E 


Unilab clock: RO- PSN 


WR- WR- 

Kl RD-~- 

K2 not used 
Cycle types: read A@® to BF 

write C@ to OF 


Fatch EQ to FF 
Overlay area: S bytes at the top of 2K bank 


Breakpoint code: CALL 7FA (F4EN) 


Interrupts: does not have NMI. 
type vec address 
reset Ol 
' external 3H 
timer/ctr 7TH 


Unilab commands: 


=OVERILAY 
n RNAME name assigns name to Rn 
ENI, OISI enable/disable interrupt 


ENTCTI, DISTCTI enable/disable counter 

INTRAM, EXTRAM use of intercnal/external data memory area 
PIGGYBACK patch for NS87PSQ., 

PIGGYBACK ° for expanded chip. 


THE 8051 MICROPROCESSOR FANILY 


DUB-SL: expanded mode (external rom) 
Sales Ranking -- #2 with 13% of total sales 
DOB-SIP: OKI piggyback MB8@C51VS Cinteranl rom) 
Sales Ranking -- #16 with less than 1a 


The major features are: 


o 8-bit CPU. 
o On-Chip oscillator and clock circultry 
og 32 1/0 lines 
o 64K address space for external data memory 
o Two {[G-bit timer/counters 

(Three on 8032/8951 ) 
o A Five-source interrupt structure 

(Six sources on 8032/8052) with two priority lavels 
o Full duplex serial port 
o Boolean processor 

On-Chip On-Chip 

Part Technology Pqm Memory Data Men 
BIS 1 HMOS 4h (ROM) 128 
e031 HMOS none 128 
87S 1H HMOS I Ak (EPROM) 128 
BQCS1. -° CHMQS 4le (ROM) 128 
BOCZL «© , CHMOS none 128. 
8052 HNOS BK (ROM) 256 
8032 HMOS none 256 


Oscillator speed: 3.5 to ld Miz. 


G:L ratio between oscillator speed 
and processor clock speed. 


[ : 0032/0032 ONLY 

t 

1 WY «oly 
-{ mm Pie Ch : “yee 


TIEX PS 3913 P00 ADO 
ri2cji? def rod aot 
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preCcir 3437) Po 5 ADS 
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» TXOPLS i} 2) ALEFRGG 
. ATG rsa cyte 29 [J FSER 
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AO r37 2p e712 AN 
xYAL2 CI] tt ast v2.2 Ate 


vasCir o° oN POA: 


UniLab interface considerations: 


Analyzer Cable E 


Unilab clock: 8031 Expanded 80S1 Piggyback 
RO- PSN RO- not used 
WR- WRG WR- not: used 
Kl ROT Ki GRNO 
Ke EAS K2 ALE 
Overlay fArea: FFCQH -- FFFSH for expanded 
FCQH ~- FFF for piggyback 


Breakpoint code: LCALL ovadr (L2xxxx ) 


Cycle types: fetch 70 -~ 7F 
read 30 -- SF 
weite S@ -- SF 
Interrupt: 2 levels of priority 
No NMI 
Interrupt Source Vector Address 
IEQ (axternal request 0) 3H a 
TFQ (internal timer/ctr @) BH | priority 
IEl (external request 1) ; 13H ; within 
TFI (internal timer/ctr 1) 1BH { level 
RI+TI (internal serial port) 23H H 
TE2tEXF2 23H H 
UnilLab Commands: ee ne eee me meme mt ne en mem me me 
H | H 
PER -eeacccecce sor ctttttc H { t 
\ 1 | ' H H H 
H Shr Peal RAM ' H ! \ 
| 1 } (8832) 3 ' ' ! 
an 14 H ' H | 
TPS eseSae | ween rea } H H 
H | H H 1 
\ RAM | ' 1 1 
H ' ' H | 
{ . | ' H H 
INTRAM EX TRAM PMEM 
(Internal RAM) (External RAM) (Emulation 
R? Ri DR? 
(DR? DRI) DRI 
cannot use M here 
=QVERLAY 


n RNAME name ase6eigqns name to Rn 


NEM) 


8089 
CHMOS) 


ee ee 


THe 8085 microprocessor C40 pin dip package) ts an 8-bit CPU 


with addressing capability of 64K. The 8085 has 8 data/address 
multiplexed lines for lower address AO-A7 and data DQO-D7. The 
upper 8-bit address lines are not multiplexed. It has four 


vectored tnterupts Cone is nonmaskable) and INTR line for a total 
of five interupts. The 8085 also supports serial I/0. 


UniLab Interface 


The 8085 uses analyzer: cable "A" 


Speed 


Standard UDL High Speed UDL 
BO085AH = SMHz YES . ES 
2O0B5AH-2 =SNHe YES LES 
JO8SAH-1 = ==G6HIlz ys 


Reserved Vectors an 


Memory Areas : 


ee 


User can choose any of these RST vectors. 


RST. =BP 
0 Sarg 
8 Ch 
1O D7 
20 ng 
28 BE 
30 ey 
38 Bie 


You can change the overlay area by placing a 3 byte JP 
Instruction at one of the above restart vectors and then entering 


XXXX, where XXXX ts the address placed at the above restart 
vectors. 


Braakpoint Opcoda 
CF is the default 


sse xx =BP to change opcode 


Unibab Gloek 


RD- WR- Read, Write pins 352,31 


status Lines 


Ki to INTA pin I1 

K2° to RESET OUT pin 3 
C4 to Sl pane: $5 

C5 to SO pin 29 

C7 to T/OH pin 34 


Cycle Types 


FETCH 70 TO 7F 
READ 50 TO SF 
WRITE 60 TO 6F 
OUTPUT EQ TO EF 

.; INPUT DO TO .DF 
INTERRUFT FO TO FF 
1/0 DO TO EF 


Special Commands 


"cOpo PATCH 
=B 


=OVYERLAY 
INP Used to read I/O port 
OUT Used to write I/0 port 


NHI Not Supported. 


THE 8986 MICROPROCESSOR FAMILY 


"The 8086 Microprocessor 


Part speed 
{[6-bit data bus 8@86 G Nez 
2O-bit address bus 8886-2 8 MHz 
8886-1 1Q Milz 
The 8@186 Microprocessor | Part Speed 
Incorporates the powar of "15-20 chips" 82186 B-lMttts 
{n one package. Higher performance, more BOLS6-6 6B Miz 
{nstructians. 
The GO0286 Microprocessor Part Speed 
24-bit address bus. 16 megabytes 80286-8 8 Nilz 
physical memory. i! Magabyte “virtual” memory. 8Q0286-6 6 MHz ‘ 
rg 80296-4 4 MHz 
Software considerations: 
Thea same package supports the 8086, the 80186, the 80286 and 


the AT. Support for the 80286 and the AT 
Patch commands: 


86MIN {86PATCH MAXMODE 


Special commands: 


ALL thea words dealing with segments. 
writeup on segmentation. 


df 
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Figure 2. IAPX 86/10 Pin Configuratlon 


is not good. 
ATPATCH 


See the one page 


MINIMUM AND MAXIMUM MODES ¢ 


The requirements for supporting minimum and maximum 
IAPX 86/10 systems are sufficiently diflerent that they 
cannot be done efficiently with 40 uniquely delined 
pins, Consequently, the 8086 Is equipped with a sirap 
pin (MN/MX) which defines the syste: conligurallon 
The definition of a certain subset of the pins changes; 
dependent on the condition of the strap pin. When, 
MN/MX pin Is strapped to GND, the 8056 treals pins 24° 
through 31 In maxtinum mode. An 8288 bus controller: 
Inlerprets status Information coded into $0.5) S2 lo gent 
erale bus {Iming and control signals compatible with { 
the MULTIBUS® architecture. When the MN/MX pin Is | 
strapped to Voc, the 8086 generates bus control signals i 
Nself on pins 24 through 31, as shown In parentheses If { 
Figure 2, Examples of minimum mode and maximum , 


q 
mode'systems are shown In Figure 4, 1 
“4 
4 


Yector Table 


Address Interrupt - 

FEPEO=F RESET. 

OQ080-3FF A 256 element vector table. Each 
vector is 4 bytes long: a two byte segment 
followed by a two byte address. We use 


interrupts 1, 2 and 3. 
UniLab interface considerations 
Analyzer cable A for 8086 Min mode and for 801586. 
Analyzer’ cable L for 8086 Max mode. 


Reserved areas: 


Q@004-F vectors for single-step, for NMI and for 
software breakpoint. 


EFFBL-B2 for interrupt service routine. (relocatable) 
Overlay area: FFF BB-FFEF 
Breakpoint code: © INT 3 inserted at breakpoint. 
Maximum oscillator speed: 


Standard Unilab handles all family members. 
High-speed not necessary. 


8Q1396 SOS6NIN  88SGMAX 
Unilab clock: RO- RD RO lil These lines 
WR- WR WR 9 attach to 
Ki-° DT/R DTR , {6 the bus 
<2- DEN INA 4. controller. 
In addition, we use the Unilab input ALE, to determine when the 
address is valid: AGE ALE 5 
89186 8Q36MIN SQ8EMAX 
Status lines: C4 na na na 
cS 5Q na SQ 
C& Sl na Sl 
7 2 MIO $2 
8086max/89186 SOBENIN 80286 AT 
Cycle types: fetch 8Q-9F BF BQO-BF 6Q0-7F 
read AQ-BF 8Q-BF AQ-AF 4Q-SF 
write CO-DF CO-FF CO-DF CO-DF 
output 4Q0-SF S07 F 50-SF 2O-3F 
input LOTSr QO-AF 40-55 EQ-FEF 


{nterrupt OO-1F QQ-QF QQ-1F 


THE 8988 -FROPROCESSOR FAM 


The 8088 Microprocessor 
8-bit data bus 
20-bit address bus 


The 8@188 Microprocessor 

Incorporates the power of "LS-29 chips" 

{n one packages. Higher performance, more. 
{nstructions. 


Software considerations: 


Y 
Part Speed 
8288 5 Mie 


8888-2 8 MHz 


Part Speed 
80188 8 MHz 


8Q188-G BS MHz 


The same package supports the 8088, the 8@188 and the PC. 


Support for the PC as target is not good. 


Patch commands: 


88MIN 188PATCH BEMNX . PCPATCH. 


Special commands: 


All the words dealing with segments. See the one paga 


writeup on segmentation. 


MIN [ Max 
move =| MooE 


Vee 
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Ares3 
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A1ass 
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538 (HIGH) 


HOLD = (ABT TB) 
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WA (COER) 

oH (BR 
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ALE {aso 
TRTA (ast 
TEST 


Figure 2. IAPX 88/10 Pin Configuration 


Minimum and Maximum Modes 


The requirements for Supporting minimum and maxi. 
mum 8088 systems are suffictently different that they 


through 31 and 34 In maximum mode. When the MN/MX 


“pin Is strapped to Voc, the 8088 generates bus contro} 


signals Itself on Pins 24 through 31 and 34, 


Vector Table 


Address Interrupt 
FFFEQ-F RESET 
WOQQQQ-3FF A 256 element vector table. Each 


vector is 4 bytes long: a two byte segment 
Followed by a two byte address. We use 
interrupts 1, 2 and 3. 

UniLab interface considerations 


Analyzer cable A for 8088 Min mode and for 8@1399. 


Analyzer cable L for 8@88 Max mode. 


Reserved areas: 


QQO04-F vectors for single-step, for NMI and for 
software breakpoint. 


FFFB1-B2 for interrupt service routine. (relocatable) 


Qverlay araa: FFFBB-FFEF 
Breakpoint coda: INT 3 inserted at breakpoint. 


Maximum oscillator speed: 


tandard Unilab handles all family members. 
High-speed not necessary. 


82183 8088MIN B8@88MAX 
Unilab clock: RD- ROD RO li These lines 
WR- WR WR 9 attach to 
Ki- DT/R DTR 16 the bus 
K2- DEN INA 4. controller. 
Unilab input ALE ALE ALE 5 
80188 8QB8MIN B8O88MAX 
Status lines: C4 na na na 
cS SQ (BHE ) SO 
C6 S1 na . St 
7 S2 MIO ee 
B8088max/8@188 S8@8EMIN PC 
Cycle typas: fatch 8Q0-9F LF 4Q0-5F 
read AQ-BF 20-3F 60-6F 
write CQ-DF 4Q-SF CQ-CF 
output 4Q-5F CQ-DF QQ-@F 
input 2O-3F AQ-BF EQ-EF 


interrupt @Q-1F 80=9F 


The 6896 can be separated inte several. sections for the ourocse 
ef describing its operation. There is a CPU, a propgranmadle Mich 
Speec 1/0 Unit,an analeo to oigital cenverter,a serial wert, and 
a Puise With Modulated (AWM) outout for digital ta analeo 
conversion. fr-addition ta these functional units, there are some 
sections which support overall operation of the chio such as the 
Cleceyw cenerateor . 


DDE-96: Sales ranking {1 with «in 
Osciliater freauency: © Mhz and 12 Mhz 
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Figure 2-1. Block Dlagram (For simplicity, lines connecting port registers to port buffers are not shown.) 


Cycie Types: 
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INTERRUPT STRUCTURE: 
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General Information 


The 7Z80 Microprocessor C40 pin dip package) was introdueced 
by Zilog. The 280 is an 8-bit processor with 16 address lines, 8 


data lines and can address 64K of memory. The Z80 supports 1/0 
mapped peripherals with special control lines. You can have up 
to S1l2 individual ports using this scheme. The Z80 can also have 
its I/O functions memory mapped. When the Z80 1s operated at 6 
MHz or 8 Hilz, the memory access Elming is critical and can cause 
the desianer fits as high speed memories are needed. The bus 
cycle time necessary for the faster chips seems to have been 


stolen cut of the read/write times. 

The Z80 supports three C3) modes of interupts; Mode O, Mode 
1, and Mode 2. The UDL handles one byte interupts very well. At 
the present time we have problems with three C3) byte Interupts. 


The 280 supports NMI. 


ae a a 


jhe 280 microprocessor uses analyzer cable "E". 


opeed 

Standard UDL High Speed UDL 
ZB8O = 2 Nilz YES YES 
ZBOA = 4 HHz YES YES 
Z80B = 6 HHz NO YES/MAYBE 
ZB8OH = & NHz NO _ NO 


Reserved Vectors and Memory Areas 


User can choose any of these RST vectors. 


RST =BY 
0 C7? 
8 CF 
10 D7 
20 DF 
28 IF 
30 B7 
38 YF 


You can change the overlay area by placing a 3 byte JP 
instruction at one of the above restart vectors and then entering 


XXXX, where XXXX ts the address placed at the above restart 
vectors. 


Braakpolnt Opcoda 
FF 1s default opcode 


Use »x=BP to change opcode 


UniLab Clock 


RD- WR- Read, Write pins 21,22 


status Lines 


Ki to PML. jkr -27 
K2 to. *ITORQ pin 20 
A19 to ‘*HEHRQ pin 19 


Cycle Types 

FETCH AQ TO BF 
READ EQ TO FF 
WRITE CO TO DF 
OUTPUT 4Q TO SF 
INPUT 6Q TO 7F 
I/0 4Q TO 7F 


INTERUPT 20 TO OE. 


Special Commands 


=BP 

=OVERLAY 

INP Used to read I/0 port 
OUT Used to write I/0 port 


TNB Shows lines leading up to current breakpoint 


BHR64180 


CCMNOS) 

General Information 

The HD64180 ts a 64 Pin shrink dip package by Hitachi. It 
is instruction compatible with the Z80 and has many added 
tnstructions. The 64180 1s an 8—-bit microprocessor with 18 
address lines and can access S12K bytes of memory. The processor 
has many added features such as DMA, MMV, two serial ports and 
two 16-bit timers. The HD64180 supports the Z80 Mode O, Node 1, 
and Mode 2. It has many other interupts, lee. from special 
functions on board plus two additional interupt lines. It-also 


supports NHI. 


UniLab Interface 


Na et ened 


The HD64180 uses analyzer cable "E" 


User enters HD64180 patch word. 


Speed 
Standard UDL High Speed UDL 
2 MHz © ES | ; YES | 
4 MHz YES . YES” 
6 MHz NO . . NO 


Reserved Vectors and Memory Areas 


User can choose any of these RST vectors. 


RST =BP 
O CF 
‘8 CF 
10 D7 
20 Dir 
28 EF 
30 as 
38 FF 


. You can change the overlay area by placing a 3 byte JP 
instruction at one of the above restart vectors and then entering 


XXXX, where XXXX 1g the address placed at the above restart 
vectors, 


Breakpoitnt Opcode 
FF ts default opcode 


Use xx=BP to change opcode 


UniLab Clock 


RD- WR- Read, Write pins 63, 62 


status Lines 
Ki to  LIR 


K2 to LOE 
A1l9 to ME 


Cycle Types 


FETCH AD TO: BE 
READ EG. TOPE 
WRITE CO -TO.-DF 
OUTPUT 40 TO SF 
INPUT GOTO OLE 
I/O 40 TO 7F 


INTERUPT 20 TO 3F 


opecital Commands 
HD64180 patch word 


=BP 

=OVERLAY 

INP Used to read 1/0 port 
OUT Used to write 1/70 port 


TNB Shows lines leading up to current breakpotnt 


NSC800 : 


CCHOS) 


General Information | 


The NSC-800 CMOS microprocessor C40 pin dip package) igs 
Ntioe si Semiconductor’s pe ae to the Z80. The NSC-800 is fully 
compatible with the 280 tnstruction set. It has 8 data lines 
multiplexed with the lower elght address lines. The addressing 
range for the NSC-800 1s 64K memory C16 address lines total). 
The NSC-800 has the Same I/O addressing capability as the Z80; 
both memory mapped and I/O mapped. The NSC-800 differs tn the 
number of interupt {inputs it has. The Z80 has NMI and INT. The 
NSC-800 has 4 tn addltion to NMI. The Interupts supported by the 
NSC-800 include those of the -Z8Q; Mode O, Node 1, Mode 2 and tin 
addition tnelude INTRA, INTRB, INTRC. These correspond to *RSTA 
C3C), “RSTB €34) and RSTC C2 Ys 


UnibLab Interface 


The NSC-800 ugas analyzer cable "QQ", 


User types NSC-800 patch word, 


opeed 
Standard UDL “High Speed UDL 
2 MHz YES YES 
4 MHz YES YES 
6 MHz NO YES 
8 NHz NO YES 


Reserved Vectors and Memory Areag 


RST =B5P 
O U7 
8 Cr 
LO D7 
20 DE 
28 BE 
30 oa 
38 CE 


You can change the overlay area by placing a 3 byte JP 
instruction at one of the above restart vectors and then entering 


AXXX, where XXXX ts the address placed at the above restart 
vectors, 


Breakpoint QOpcode 


FF ts default opcode 


Use xx=BP to change opcode 


RD- WR- Read, Write pins 32,31 


Status Lines 


K1 to INA pin 26 
K2 to RSO pin 37 
C4 to ob pia 27 
A119 to IOM pin 34 


Cycle Types 

FETCH 20: TO 7E 
READ 50 TO 5F 
WRITE 60 TO 6F 
OUTPUT EO TO EF 
INPUT DO TO DF 
1/0 DO TO EF 


Special Commands 
NSC-800 Patch Word 


=BP 

=OVERLAY 

INP Used to read I/0 port 

OUT Used to write I/0 port 

‘“TNB Shows lines leading up to current 


breakpoint 


The Super@ family consists of basic microcomputers. 
proetoonactk emulators, and ROMless microcamouters. The varintus 
Family members differ in the arount ef an-chipn ROM and the 
physical packaoinag. superG is a 48-pin device. 


Major features: 


Fiull-duolex UART. 

On-chip baud-rate oenerater. 
two 16-bit pregrammable counter/timers. 

DMA controller. 

Two register pointers that allow use. of ‘fast’ instructions to 
access register groups within 6agns. 

Additional instructions that support threaded-code languages, 
such as FORTH. 


Hardware considerations: 
Inout clock speed: 1-12 MHz 

O:l Input clock toa bus cycle ratio 

(Std. Unilab is fine) 
Reset address is wde7H, 
Part 1 used far ADZ-AD7, Port a used far AB-ALS. 
Stack can be internal or external. Configured in Port Mode 
register (Fil): P35 (pin 39) active if external stack. 
UnilLab interface considerations: 
58 uses Analyzer Cable D 
Reserved areas: 761 to 785 reserved (relocatable). 
4 comsectitive repisters (default is reoister 6@a- 
GS). 


Overlay area: Immediately above reserved area (default is 7B&) 


cyt CONT NUR DATA HATA MISC : 
2 FF 0020 EGFOFE LD FO, RFF WEL TL << Porro Mote ZEUISTERL Con FIGURES. 
1 FF 0023 EGFI28 = LD FI, #28 TUTTL TL < Por 4 move RE Gis cEkR Con eiauURED.. 
4 FF 0026 EGFEQ2 LD FE, #2 TLE UCL = EXE mMemoRY Timing Réu. 
7 FF 029 E6D31@ LD 09, #10 MUL TEE gf srack POINTER, Use. 
A FF @82C E6D80@ LD DA, ¥0 HUME TEE << Stack Powe msB. 
D FF O@eF £66007 LD 60,47 HME ME € ReéaisreR Pormmrem Coe Gnrnling 
19 FF 2832 E66181 LD 61, #0! eueeecrapeeuecetl DELVG cond rRol, 


13 FF 0035 C6CQ1234 LOW CO, 1234 = LANAAALL ALESEEEE 
17 FF 0039 C6C25678 LOW Ce, W5678 A LLLLLAL LEE140d4 
1D FF @83D CECANBCD LOW C4, AMBCD | oLESLdEHH POSES ED! 
IF FF 0041 COC6EFI2 LOW C6,HEFI2 = LLLLLL04 U442LLL1 


UniLlab Cormmands: 


rr =PTR Changes reserved registers, where ‘n’ indicates 
the lowest numbered register in hex. Default is 
GOH. NOTE: Program must inelude imstructiang tea 
load register pair GAH with reserved area value, 
Brealcooints will rot worl pDraperly unless they are 
Nlaced after these initialization instructions. 


n =OQVERLAY Changes lecation of overlay area. Can only be Dlaced 
at an even address. Reserved area is S bytes below 
this. 

n =WREG Set starting address for disassembler, 

EXTRAM Set debug cperations ta work in external data 

' memory. . . 

EXTROM Set debug operations to work in Orcoaran memory. 

EXTSTACK — Set external stack made. 

INTSTACK Set internal stack mode. 

n DR! Set the data register (CQ-FF) tx indicated value. 

n DR? Disolay current value of indicated data reoister, 

n R! Set register to indicated value. 

n R? Display current value of indicated data reovister. 
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Figure 12-5, External Memory Timing 


Figure 12-2. Conflgurlng Port { for External Memory 


R210 NANKO (Fo) POM 
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Figure 12-6. Data Memory ” Figure 12-3. Configuring Port 0 for External Memory 
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ROM 
Part ' Canacity Comments 
ZO6%1 | rat a4 Masked ROM part, used in high 
volume praduction. 
Z8G6UG 2 Pigoyback part used for 
development pDUromses, 
Z8614 4A Masked ROM Part, used in high 
Volume praduction. 
26612 2 64-pin ROMless Dart, used in 
development systems. 
ZO61zg a Pigoyback Dart, used far 
development Purooses, 
Z8681/62 4) LOW COST ROMless Production part 


with reduced I/0. 


Major features: 
Two conunter/t imers 
Six vectored interrupts 
UART for serial I/Q 
Power-—down motion 
Hardware Considerations: 
Input Clock speed: {2 MHZ tmacimeun. 
8:1 Input clock ta bus cycle ratia 


(Std. Unilab is fine) 


Reset address is determined by user as xXxac (see application 
notes), 


Stack can be internal or external, Configured in Port w-{ 
and Port 3 registers CS connected to ps4 (Din 29) if external 
stack. 


UnilLab interface Considerations: 


26681 uses Analyzer Cable D 
Piggyback part “Ses Analyzer Cable FE 


Reserved areas: /7AF ta 7E3 reserved (relocatable). 
One reoister Dair (default is register pair 6a), 


“ Overlay area: Immediately abave reserved area (default is 7B4), 


Cycle Types: 


ZOE81 Z8G681 28 pignyback 

int. stack ext.stack: Ree eset ne ee 
fetch FF FF ae FF 
read FF DF F f= 


Write 7F 5 FF 


Unilab Commands: 
n =PTR 


GH. 
load 


NOTE: 
register 


Changes reserved register 

the lower numbered repister 
Prooranm must inelude instructions 
Dair with reserved area Valite. 


“mn? indicates 
Default is 
to 


where 
in hex. 


DaAiT, 


Breakpoints will not work oroperly unless they are 
Dlaced after these initialization instructions. 


n =QVERLAY Changes location of 


overlay area. 


Can only be placed 


at an even address, Reserved area is 5 bytes below 
LS. - 
EXTDATA Set disassembler to expect stack operations in 
external RAM, 
EXTRAM Set debug operatians to work in external data 
MENVITY « 
INTDATA Set disassembler ta expect stack operations ir 
internal RAM. 
PMEM Set debug operations tos work in external orcooramn 
memory. 
PBACK Set disassembler for 7-9 Piggyback chip (28683 op 
ZBG1S). 
PBACK! Set disassembler for 7-8 expanded chin (Z8G681i ap . 
- £8662) 
cy# CONT ADA DATA HDATA MISC 
-1 FF C@ac E6oece = Lp 8, #C8 TALSELLL L1L001E1 CMSB of address loaded, 
2 FF COQF EGFB9G LD FQ, #96 T1LLLLAL LE4101L ¢ Port Q-1 Mode reg. config. 
D FF Cele 8pceis Jp ALW, COL5 A{LLUNEL WLLLL14 ¢ Three byte jump inst, 
8 FF CQ15 E66007 LD 68, #7 ALQULLE1 (14001th  ¢ Register pointer for gaining 
B FF COLQ EG6INF = Lp 1, aA AQLEL0L (4000008 debug control, 
E FF COIB EGFDI@ = LD FD, 418 TELLLQEAL LE200t14 
11 FF COIE EGFEQ® = LD FE, #@ TYLLLLLL ALL00111 ¢ Stack pointer, LSB. 
14 FF Ce2t EGFF4Q LD FF, #49 HLLLLNEL 1LELLLLL ¢ Stack pointer, HSB, 
17 FF C024 EGFCOO... LD FC, #2 QUULLGLL 14400044 
1A FF C827 acel LD RO, Hf TEQUQ0L (000th! ei 
IC FF C8e9 1023 LD RI, ¥e3 VAULT A4200001 
. Control Regiatera se iy iehinibiene 
. Registers N28 POLM a ——SIACK POINTER (BITS 7-0) . rE sru 
: (Continued) Port 0 and | Mode Register pe he as 
‘ ; (FO; Wrile Only) 455 i pai 
CACICACACA COALS 254 PT MASK REGISTE Fao oIMA . 
—_— — 150 INTERRUPT REQUEST REGISTER FA ina ' 
stage mone | : [> gctoureue 249 INTERRUPT PRIORITY REGISTER Fe IPA ; 
InPUut em oy fF | Ol = tHrye 243 PORTS 0-1 MODE fa POoIM 
GXTEANAL uae Gale , Scare ee ane PORT 3 MODE BE FAM 
(apical i 8 EXTERHAL 246 PORT 2 MODE Fé PaM 
co as "10 PHESCALER FS PEO 
bo <" svt ourrur aaa WIMENICOUNTEn® FA To 
fe = An,-A0, 243 Ti PRESCALEA Fy PRES 
bis MU ne hen eh, ‘aaa TIMERICOUNTER 4 F2 1" 
We PELECI ED Ac rr TIMER MODE Ft 1MR 
240 SERIAL VO Fo 310 
1252 FLAGS IMPLEMENTED 
Flag Reglater sh 
(FCy; Read/Write) . . tar 1 
&1|>s[os[ou]o, [of [>] 
QENENAL-PURPOSE 
| | [Love FLAG PS AEGISTENS 
DECIMAL Anwust riaa 4 of 
cee ne ) ast creer fe 
: TEND FLAG soe 2 PORT? 02 P? 
‘ CARAY FLA t OAT ‘| oot Pye 
. ; t) PORTO 09 ro 
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Features: 


Systenm/Normal operating moda 


System/Normal moda stack 
118 instruction types 
414 total 


instructions 


‘ fiilditional Faatures: 


Maximum Clock Frequency: 


Extended Processing Unit 
Memory Managemant Unit 


Teble 8, 
root 


Addteasiug Snecns 


L057 


TAK Crt, Stmeary of Ol{ ferances 


a, 


“nos 


meee 


10.1 


Yobte 2-1. 


———-—-.. 


LOG0A Sl y-Sty 


7.59 Nhe (standard) 
Mhz (high speed) 


Status Line Codes 


Del lndt fon 

Intertial Ooneatlon 

Hemory Refredt 

1/0 Noletsnce 

Spectaot t/0 Refecance 

Seyment trap Ackuowledge 
Honmankaty ty Iotercupt Acknuntadan 
Monvectored Interrupt Acknowledge 
Vectored Inteerupt Acknowledge 
Dota Memury Nequest 

Stock Hemory Renqunat 

Dota Mimory Request (tru) 

Stock Memory Requent (tru) 
Jesteuct bon Speer Access 
Ingtruetion Tetch, Tirst Yord 
Iranslee between CPU ond Cru 

Test and Set Onta Acces 

(20003 and zona only) 


* 9 J 
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Untlab Interface 


Analyzer Cable C 


Unilab Clock: RD- OS 
WR- not used 


ie not used 
K2 not used 
Overlay Area: 700 --703 


Placed at an even address 
This addres must be put in the interrupt 
vector by the user. 


Break Point Opcode: EXTEND (FQOQ) 
SC xx (?7Fxx) if co-procesuor is being used 


Cycle Types: read CQ to CF 


write 40 ta 4F 
fetch EQ to FF a poumiaawti 
input 80 to SF , res ON 
output 00 to OF reser 
spec in 99 to OF nat” Beene aos iets siciget nts 
spec out 10 to IF ©. [ain }-- > - 
stack read D8 to DF seh ao 
stack write 58 to SF Ce cr a eo 
Tie] me rolete 
Te — ate w e 
Interrupts: eo fetes) oo 
hae] a 
TYPE FCW adr PC adr oe ee fae ow aseny » on 
reset 2 4 » 4 [THREE [-~-- 
extend PSE a4. PSA. +6 ive — Tarennurh 
BC PSA “+ C PSA +E SO be ee ae" 
nmi PSA + 14 PSA + IG ss a ea Hoon 
ava OCC Oemeed tcec oy 
tet 
: | ff 
UniLab Commands: a ee 
=RAM set addres of RAM 


=RAM.SSEGMENT set segment where RAM resides 
=ROM.SEGMENT set segment where ROM resides 


SEGHENTED turn segmented mode on 
UNSEGMENTED turn segmented moda off 
=OQVERLAY 
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Figure 1.2 Pin 
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m “@ Internal 
6 x8 Internal RAM 
fnstruction 


ROM 


typa 
instructions 
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ca 
OY 
— 
Pi 


YOSL2 Family: 
783519 ROH-leass version 
78319 has differant pinout 
has extra control Slonals for: 
o data fetch 
9 internal PAN read 
9 internal RAM write 
Clack Spead: 2Nhz (standard) 
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Figure 25 Gonera}-Perpore Register Dealgnation and Storage 


Untlab Interface 


Analyzer Cable A 


Unilab Clock: RO- internal read, axternal read 
& instruction fetch 
WR internal write & external write 
Kt not used 
K2 not used 


Cycle Types: read FO to-FE 
weite D@ to OF 
fetch B82 to BF 


Overlay Area: 80 -- 82 
: even address =QUVERLAY 
BPTRIGADR must be at odd address & 
program uses one byte before BPTRIGADR 


Break Point Code: BRK (SE) 


‘Table 4,1 Interrupt sources and Vector Addresses, 
Interrupts: 


OEFAULT THTERNUPT SOURCE MACRO —- YEC TON 
PRIONUY : » SERVICE = ADUNESS 
a et ene 
- RESET EXTENUAL NESET LINE - oooort 
a 
HOU-HASKADLE = wt EXTERNAL HOH-HASKAOLE IMT. oH 0007 
THTERRUPTS - Or WAICHDOO TIHER W OOOA 
Re a ee, 

1 0 cry 00 UP/DOKH COUNTER Y OO1A 
fot Creon UP/DOWN COMITER | OOICci 
{ 2 ChE 10 UE/OOWM COULTER .Y OOTEN 
{ 3 creat Ur DOWIE COUITTER uN 00208 
Vececccccncecesccerevcevesersereteseeseseesecensecerseeesenee 
t 4 Ext EXTERNAL TNTERROPT 0 Y coon 
i$ EXIF EXTERNAL THPERMUPT Y Y 000611 
1 6 EXIF 2 EXTEMNAL SHIENRUET 2 Y 000811 
Lecccsvecccencereccseccssncvcssseecsensteeeescecereuesececees 
HASKADIE =f 7 tho TIMER FLAG 0 Y OOoEN 
IHTEMMUPTS J 8 Teed TINEA FLAG 2 Y OOroH 
1 9 The? TIMER FLAQ 2 Y oolazt 
Lisicin cieinietis'ee tsieiew'be Mec dee uiad's wibin tba O44 Ve bau e Saleeddebeseateay 
1 30 StF SEATAL PORT Enron H 0022 

{ou SNE SEIMAL PORE ACCETYE GUTFER OY 0021 *: 
{12 STF SENTAL PORE TRANSMIT BULFER Y 002611 
19) aoe Aro CONVERTER OONE FLAG Y 007uK 
you 1OF TIMEDASE COUNTER FLAG H oooc 
We or ae Ss Sa 
- ORK BREAK INSTRUCTION N OOJEN 


Address @ through 7F will not be disassembled From 


trace, 
Q@ --~ 3F interrupt vector 
49 -- 7F call table area 
“Unilab Commands: 
SHOW-NAMES/HIDE-MAMES show/hide ¢efr nanes 
ALIGN/ALTNG ° align cycles foe 
adc = SFR-SHOW display name for sfr at adr“ 


=QUERLAY 


Hex Bill White 
PROM: Jim Kk. 
Cross-assemblers and 
Cross-tompilers 


lutroduction 


Terminology 

Cross-compilers and cross-assemblers take a source code file 
and produce a relocatable object module. The object modules are 
then joined together by a linker, which produces executable code, 
a symbol table and (usually) a load map. 


Often people do not draw a distinction between the linker 
and the assembler/compiler. 


The executable code is the machine language instructions 
understood by the microprocessor, 


The symbol table tells what values are held by the labels 
and variables used in the source code. This information is 
needed to understand what source code generated what executable 
code. 


The load map shows where each relocatable object module was 
placed. The load map produced by MicroSoft compilers also shows 
the absolute address of the executable coda produced by each line 
of source code. 


Possible confusion in terminology 
The executable code is also refered to as the object code or 
Lhe machine code. This is not the same as the object module. 


In the PC world, two types of files run under DOS: 
-COM files, and 
-EXE files. 
lhese files are both "executable code" for the PGs 


Uur customers 

Unilab customers use cross~-compilers and cross-assemblers to 
produce the programs that control their microprocessor based 
target systems. Orion does not make assemblers or compilers, so 
our customers purchase them from any of a large number of 
vendors, 


Once a customer has produced executable code, he/she needs 
lo transfer information to the UniLab system, The information 
wroduced by a linker can come ina wide variey of formats. The 
Unilab system can accept some of those formats, but not all. 
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Symbol file formats 
Why © 

Qnes a customer has loaded in a symbol file, they can use 
{he symbolic names in place of hexadecimal numbers. In addition, 
lle symbols will be substituted for addresses and values in the 
trace, breakpoint and disassembly displays. 


“auipported 


Lille formats and compatability 


Executable file formats 
Why? 

Qur customers need to load their program into emulation 
memory if they want to perform DEBUG operations. The trigger 
end trace capabilities do work on a program running from a ROM 
chip, but in general it is easier to put a program into emulation 
KOM than it is to put it into an EPROM. 


supported 
The Unilab system can load in two different types of object 
code files: binary and Intel extended hex. 


The simplest format for an executable file is binary. The 
file contains nothing but a segence of hexadecimal values. The 
customer has to know where to start loading the file into memory. 
load binary files with <start addr> <end addr> BINLOAD <file>. 


An Intel hex file contains a series of records which specify 
lhe location to which each byte of object code must be loaded. 
Wilh -Ehis format you can easily place information here and there 
(hroughout memory. Load Intel hex files with HEXLOND <file>. 


There are two other schemes for encoding information that 
are similar to the Intel hex format: 
Tektronix hex format, 
Motorola S records. 


In addition, there is a "“mimed format" Intel file, which has 


symbolic information and object code mixed together. We will 
support that format in the near future. 
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-- Interpret the Trace -- 


Symbol example 


The trace printout below shows a disassembled trace with 
symbol translation. . 


First eight symbol names were entered by hand: 


1900: IS Init.Stack 
3 IS Start.Loop 

29 IS End.Loop 

10 IS First.IncA 
3456 IS Init.BC 
789A IS INIT.DE 
BCDE IS INIT.HL 

28 IS LAST.INCA 


And then F9 was pressed, to get a trace of the startup: 


Q 
St 
3S 


ADR DATA : 

0 0000 310019 LD SP,INIT.STACK 
3 START,.LOOP 0003 3E12 LD A,12 

5 0005 015634 LD BC,INIT.BC 
8 0008 119A78 LD DE, INIT.DE 
B 000B 21DEBC LD HL, INIT.HL 
E QOOE C5 PUSH BC © 

F 18FF 34 write 
10 18FE 56 write 

11 OOOF Cl POP BC 
12 18FE 56 read 

13 18FF 34 read 

14 FIRST.INCA 0010 3C INC A 

15 0011 3C INC A. 
2A 0026 3c INC A 
2B 0027 3C INC A 
2C LAST.INCA 0028 3C INC A 
2D END. LOOP 0029 C€30300 JP START.LOOP 
30 START.LOOP (0003 3E12 LD A,12 

32 0005 015634 LD BC, INITsBC 
35 0008 119A78 LD DE, INIT.DE 
38 Q000B 21DEBC LD HL, INIT.HL 
3B QOOE C5. PUSH BC 
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-- Interpret the Trace -- 


After these symbols have been loaded in, you can set a 
trigger or a breakpoint using the symbolic name: 


LAST.INCA AS 


The last example, below, shows breakpoint displays with 
these same symbols defined: 


RESET END.LOOP RB resetting 


AF=2B28 (sz-a-pnc) 
END,LOOP 0029 


SSTEP NMI 
AF=2B28 (sz-a-pnc) 
START. LOOP 0003 


N 


AF=#1228 (sz-a-pnc) 


0005 


In Detail -- 


BC=3456 DE=789A HL=BCDE IX=FFFF IYsFDFF SP=1900 
C30300 JP START,.LOOP (next step) ok 


BC=3456 DE=789A HL=BCDE IX= FFFFP IY=FDFF SP=1900 
3E120 . LD A,12 (next step) ok 


BC=3456 DE=789A HL=BCDE IXsFFFF IY=FDFF SP=1900 
015634 LD BC,INIT.BC (next step) ok 


eA PROMS ** 


of PM module) 


PERSONALITY READ/ PROGRAM EPROM SIZE 
EPROM | VOLTAGE ___MODULE EPROM COMMAND DEC. _1__HEX 
2716 Ci,a)d . 25 PM16 RPROM / P2716 OR PD2716 2K. 4 7FF 
2716B 12 PM16B RPROM / P2716 OR PD2716 
27C16 Cn) 25 PM16 RPROM / P2716 OR PD2716 
2732 Ch) en PM32 R2732 / P2732A 4K {| FFF 
2732A C1,tx>d 21 PM32 ~R2732 / P2732A | 
2732B V2 PM32B | R27352.-7* P2732n | 
21032 21 PM32 R2732 / P2732A 
27C32 Cn) 25 PM32 R2732 / P27C32 Cbreak pin 8 


2764A C1) L235 PMS6 RPROM / P2764 OR PD2764 8K { LFFF 
2764 Ci,h) va bee PMG64 RPROM / P2764 OR PD2764 H 
27C64 C1) L240 PMS6 RPROM / P2764 OR PD2764 
27C64 Ch, f) 21. PM64 RPROM / P2764 OR PD2764 
7128 Ci,h,t) 21. PM64 RPROM / P27128 16K { SFFF 
=. goon CA) 12.5 PM56 . RPROM / P27128 
 i28 CEX) L252) PM56 RPROM / P27128 
27256 Ci,h,ad 12.5 PM56 R27256 / P27256 S2K {| 7FFF 
27256 Ct) 2i. PMS6-21 Cop) R27256 / P27256 
2/C256 Cn)> 12.5 PM56 R27256 / P27256 
27C256 Cf) 2il. will not work /different programming algorithunm | 
27512 C1) 12.5 PMS12 Cop): R27512 7. P27oi2g 64K FFFF 


* need 64K UDL in 8 bit mode | 
* need 128K UDL in 16 bit mode H 


a = AMD 
fF = Fujitsu Orion also supports! 
h = Hitachi 
1 = Intel 48016 CEEPROM) PM16 P48016 
n = National 2592 PM16 P2532 
tx = Texas Instruments 2564 - Can only emulate 
t = Toshiba 


N 


optional 
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BACKGROUNDER: ORION INSTRUMENTS, INC., Redwood City, CA 


Microprocessor Development Systems and Engineering Instrumentation 


Orion Instruments, Inc. was founded in 1980 by Thomas 
Blakeslee, an electronics engineer himself in search of tools 
to help solve design development problems. As he was-unable to 
find affordable products of adequate performance, Mr. Blakeslee 
decided to design his own. Using readily available hardware 
components in innovative ways, and integrating a capable 
software environment to control the hardware, Mr. Blakeslee 
created products of remarkable price-performance and utility. 

The company's first major product, the Universal 
Development Laboratory, or UDL, was aimed at developers of 
microprocessor based designs. The UDL offered performance 
previously available only at a much higher price and was 
adaptable to handle virtually any eight or 16 bit 
microprocessor with only inexpensive accessories. Mr, 
Blakeslee's philosophies today remain a cornerstone of Orion's 
mission statement: "Provide value-rich integrated 
instrumentation for the engineering professional." 

Mr. Blakeslee's accomplishments as the holder of 10 
high-tech patents, and as the noted author of a digital logic 
design textbook used at CalTech, MIT, Stanford, and more than 


1 


75 other universities, identify him as an innovator and 
achiever, He was also founder and V.P. Engineering at 
Logisticon, Inc., which pioneered the idea of computer 
automated warehousing equipment. 

During its first few years, Orion was largely a family 
business financed on retained earnings. Products were sold 
successfully by mail order and telephone to prospects who 
responded to magazine ads. Although he had built a solid 
business, Mr. Blakeslee decided that his company's ultimate 
success would hinge on his being able to assemble a core senior 
management team geared to rapid growth in today's market. He 
also wanted to free his own time to concentrate more on product 
development, and so decided to recruit a new President to 
manage the company's day-to-day operations. Mr. Blakeslee 
retains his position as Chairman of Orion's Board, but his 
daily responsibilities are now as V.P. Research and 
Development, directing the company's aggressive product 
development plans. 

Orion's President, David E. Kahn, brought with him an 
impressive and distinguished background. In 1983 he founded 
and headed up MicroGuild, Inc., a successful software 
development company of international scope. Earlier, he was 
Vice President of Marketing for National Nuclear Corporation, 
where he was responsible for the marketing of walk-through 
contamination monitors now in use at most U.S. and overseas 


nuclear power plants. Mr. Kahn has an MBA degree from Stanford 


University, an MS degree in Engineering from Carnegie—Mellon 
University, and a BS degree from Rensselaer Polytechnic 
Institute. 

In March, 1987, Orion recruited Bill White to join 
the company as V.P. Sales. Mr. White had been V.P. Sales and 
Marketing at Arium Corporation, a manufacturer of logic 
analyzers, and V.P. Sales and Marketing at Kikusui, which 
manufacturers oscilloscopes, before joining Orion. Mr. White 
was responsible for securing the first large instrumentation 
order ever placed by the U.S. Government with a Japanese 
supplier. He enjoys an excellent reputation as a senior sales 
professional in the electronic instrumentation field. 

Mr. White has helped round out the management team 
necessary for Orion to become a major force in the exploding 
engineering tools and instrumentation market. 

The firm's principal product today is a line of PC- 
based microprocessor development systems which support more 
than 150 different microprocessors. Orion Personality Pakst™@ 
include all the hardware and software needed for fast and easy 
connection with the specific target processor. 

Orion's UDL, ana the newer UniLab II, and OptiLab 
development systems combine into an integrated working 
environment, all the tools needed to produce error-free and 
efficient microprocessor code. This approach saves the user 


hours of time compared to conventional development systems. 


Orion's development systems provide a full selection 


of symbolic debug commands so the user can quickly display and 
change all microprocessor registers, memory and ports, plus set 
hardware and software breakpoints on demand. Single stepping 
is also supported, Up to 128K bytes of emulation memory 
handles nearly any target program. 

Both software and hardware problems can usually be 
tracked down in a hurry with the included 48-channel bus-state 
analyzer whose powerful triggering language lets the user find 
bugs by simply specifying their symptoms. This technique goes 
far beyond the limited "1 0 X" triggering found in most 
development systems. Further efficiency comes from Orion's 
useful filter feature which captures only those cycles the user 
is interested in, eliminating needless sorting through long 
trace records. The user can focus on either causes or effects 
of problems by collecting either "pre-trigger" or "post- 
trigger" data. Program loading from hex or binary disk files, 
and a line-by-line assembler which permits code changes to be 
instantly patched in and tested save even more time. 

A built-in Stimulus Generator is included to allow 
system inputs to be specified right from the same instrument. 
A convenient built-in EPROM Programmer rounds out the 
iateuwent feature set. 

A recently announced Software Program Performance 
Analyzer helps optimize code by revealing exactly where a 
program is spending its time. Full graphical and tabular 


displays simplify results analysis. 


Believing in the relationship between customer 
satisfaction and company success, Orion has put in place an 
experienced team of professional Applications Engineers who can 
be contacted by telephone. After the warranty period, 
customers can purchase an on-going Support Services Option 
which includes Extended Warranty coverage and software updates, 
as well as unlimited telephone Applications Engineering 
Support. A single Support Services Option covers the main 
system unit and all the specific Orion microprocessor support 
packages the user may have purchased. 

Orion's line provides an ideal platform for product 
extensions which will bring further automation to the hardware 
and software development process for microprocessor-based 
designs. Orion is part of the expanding brigade of PC-based 
Computer-Aided-Engineering (CAE) tool manufacturers, at the 
Same time forging a clear path helping to define the future of 
Computer-Integrated Instrumentation. There are thousands of 
Orion installations worldwide. With new products now well 
along in the development cycle, Orion intends to further expand 
the industry's concept of engineering instrumentation and 
development workstations. 

Orion Instruments is privately held, profitable, and 
enjoys a major line of bank credit. The firm is located in 
Northern California, just north of famed Silicon Valley, and 
just south of San Francisco. World-renowned Stanford 


University is one of Orion's neighbors. This location boasts a 


fast-paced climate which is steeped in technology and has 


fostered so many successful high-tech companies. 


FOR FURTHER INFORMATION CONTACT: 
Orion Instruments, Inc. 

702 Marshall Street 

Redwood City, CA 94063, USA 

Tel: (415) 361-8883 
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Vi“ GY Universal Development Laboratory to support more than 150 microprocessor types. Find. 
yes out more about how the value-rich UniLab II can benefit your development projects, too! 
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ADAPTEC, INC. 
AEROSPACE CORP. 
ALLIED COMMUNICATIONS 


AMPEX CORP. 
AMPHENOL 
ARCO OIL & GAS CO. 


AS.T. RESEARCH 
AT&T 
BELL NORTHERN RESEARCH 


CERMETEK 
CIPHER DATA PRODUCTS 
COMBUSTION ENGINEERING 


COMMONWEALTH EDISON CoO. 
COMPUTER MEMORIES 
DATAPRODUCTS CORP. 


E.|. DUPONT NEMOURS & CO. 
EASTMAN KODAK 
EATON CORP. 


ELECTRONIC DATA SYSTEMS INC. 
EMERSON ELECTRIC 
EVEREX SYSTEMS 


FAIRCHILD WESTON CORP. 
FEDERAL EXPRESS 
FMC CORP. 


FORD AEROSPACE CORP. 
FORTUNE SYSTEMS 
FOXBORO COMPANY 


GENERAL ELECTRIC CO. 

GENERAL MOTORS RESEARCH LABS 
GENRAD 

GEORGIA TECH UNIVERSITY 


GOODYEAR 
GOULD 


GRANGER ASSOCIATES 
GTE COMMUNICATIONS 
HARRIS DIGITAL TELEPHONE 


HEWLETT PACKARD 


HONEYWELL INFORMATION SYSTEMS 


HUGHES AIRCRAFT COMPANY 


IBM CORPORATION 
INTEL 
ITT 


JET PROPULSION LAB 
JOHN DEERE HARVESTER 
KELTRON CORP. 


LAFAYETTE COLLEGE 
LAWRENCE LIVERMORE LABS 
LOCKHEED ELECTRONICS CORP. 


LOCKHEED MISSLES & SPACE CORP. 


LOS ALAMOS NATIONAL LABS. 
LOUISIANA TECHNICAL UNIVERSITY 


MAGNAVOX ELECTRONICS 
MARTIN MARIETTA 
MITRE CORPORATION 
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CUSTOMER LIST 


MITSUBISHI PRO AUDIO 
MOBIL OIL 
MOLECULAR DEVICES 


MOTOROLA 
NASA 
NATIONAL SEMICONDUCTOR 


NCR CORP. 
NEC 
NEW YORK STOCK EXCHANGE 


NORTHERN BELL 
NORTHRUP CORP. 
OREGON INSTITUTE OF TECHNOLOGY 


PACIFIC BELL 
PANAMETRICS 
PELOUZE SCALE CO. 


PITNEY BOWES 
PRATT & WHITNEY 
PRINCETON UNIVERSITY 


PROCTOR & GAMBLE 
PURDUE UNIVERSITY 
QUANTEL 


RACAL VADIC 
RAYCHEM 
RAYTHEON 


ROBERTSHAW CONTROLS CO. 
ROLM CORPORATION 
SAINT LAWRENCE COLLEGE 


SAMSUNG 
SAN FRANCISCO STATE UNIVERSITY 
SCIENTIFIC ATLANTA 


SIEMENS CORP. 
SONY CORP. OF AMERICA 
SPECTRA PHYSICS CORPORATION 


SPERRY CORPORATION 
SRI INTERNATIONAL 
SUFFOLK UNIVERISTY 


3M CORPORATION 
TRW 
UNIVERSITY OF CALIFORNIA 


UNIVERSITY OF MISSOURI 
UNIVERSITY OF OREGON 
UNIVERSITY OF RHODE ISLAND 


UNIVERSITY OF VIRGINIA 
U.S. GEOLOGICAL SURVEY 
US INSTRUMENTS RENTAL 


VARIAN 
VIRGINIA POLYTECHNIC INSTITUTE 
WAVETEK 


WESTERN DIGITAL CORPORATION 
WESTINGHOUSE CORP. 
WOODS HOLE OCEANOGRAPHIC INST. 


WYSE TECHNOLOGY 
XEROX CORPORATION 
ZENITH 
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